https://live.paloaltonetworks.com/t5/general-topics/ftp-protocol-injection-bypass-palo-alto-firewall/m-p/144290#M48855 <P>Hi&nbsp;</P><P>&nbsp;</P><P>About &nbsp;News SMTP over XXE&nbsp;<SPAN>attacks against Linux-based firewalls. </SPAN></P><P><SPAN>- link (<A href="https://www.bleepingcomputer.com/news/security/java-and-python-contain-security-flaws-that-allow-attackers-to-bypass-firewalls/" target="_blank">https://www.bleepingcomputer.com/news/security/java-and-python-contain-security-flaws-that-allow-attackers-to-bypass-firewalls/</A>)</SPAN></P><P>&nbsp;</P><P><SPAN>How we can create custom signature or&nbsp;&nbsp;disable classic mode FTP in PANOS to protect from this&nbsp;Vulnerability .</SPAN></P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P><SPAN>Thank you.</SPAN></P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Wed, 22 Feb 2017 16:41:20 GMT chinitsara 2017-02-22T16:41:20Z https://live.paloaltonetworks.com/t5/general-topics/ftp-protocol-injection-bypass-palo-alto-firewall/m-p/144290#M48855 <P>Hi&nbsp;</P><P>&nbsp;</P><P>About &nbsp;News SMTP over XXE&nbsp;<SPAN>attacks against Linux-based firewalls. </SPAN></P><P><SPAN>- link (<A href="https://www.bleepingcomputer.com/news/security/java-and-python-contain-security-flaws-that-allow-attackers-to-bypass-firewalls/" target="_blank">https://www.bleepingcomputer.com/news/security/java-and-python-contain-security-flaws-that-allow-attackers-to-bypass-firewalls/</A>)</SPAN></P><P>&nbsp;</P><P><SPAN>How we can create custom signature or&nbsp;&nbsp;disable classic mode FTP in PANOS to protect from this&nbsp;Vulnerability .</SPAN></P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P><SPAN>Thank you.</SPAN></P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Wed, 22 Feb 2017 16:41:20 GMT https://live.paloaltonetworks.com/t5/general-topics/ftp-protocol-injection-bypass-palo-alto-firewall/m-p/144290#M48855 chinitsara 2017-02-22T16:41:20Z https://live.paloaltonetworks.com/t5/general-topics/ftp-protocol-injection-bypass-palo-alto-firewall/m-p/146609#M49230 <P>I check in PANW Threat Vault has update <EM>Content Apps and Threats Version 667-3876</EM> for&nbsp;FTP Java/Python FTP Injection vulnerability already</P> Wed, 08 Mar 2017 09:47:17 GMT https://live.paloaltonetworks.com/t5/general-topics/ftp-protocol-injection-bypass-palo-alto-firewall/m-p/146609#M49230 chinitsara 2017-03-08T09:47:17Z