topic Re: Can PA-200 or PA-500 be infected with Win32/Hupigon? in General Topics

Can PA-200 or PA-500 be infected with Win32/Hupigon?

bokeke — Tue, 18 Jul 2017 22:07:43 GMT

I had a puzzle today from my ISP suggesting that they are receing traffic infected with Win32/Hupigon from the management interface of my PA-200s and PA-500s. I don't route user data through the management interface. So, is it really possible that PA-200 or PA-500 can be infected with Win32/Hupigon?

Re: Can PA-200 or PA-500 be infected with Win32/Hupigon?

BPry — Wed, 19 Jul 2017 15:42:48 GMT

@bokeke,

You wouldn't expect to see that signature with the PA device. It could be that it's a false positive for the signature that they are using to identify that traffic. Win32/Hupigon isn't known to infect linux based devices.