OpenSSL TLS Malformed Heartbeat Request Found - Heartbleed(36397)

SOC_CSG — Mon, 01 Sep 2014 08:54:28 GMT

Hello

I have a PA-2050 with PanOS 5.0.8 and I get this message today

"THREAT,vulnerability,1,2014/08/31 16:32:08,216.75.XX.XX,213.0.XX.XX,216.75.XX.XX,10.1.5.92,Access webprv,,,ssl,vsys1,Untrust,DMZ,ethernet1/3,ethernet1/1.938,ACUNTIA,2014/08/31 16:32:13,207017,1,41570,443,41570,443,0x400000,tcp,reset-server,"",OpenSSL TLS Malformed Heartbeat Request Found - Heartbleed(36397),any,medium,client-to-server,40719923,0x0,United States,Spain,0,"

I knew that PaloAlto is protected againts HeartBleed 36416

Palo Alto Networks Addresses Heartbleed Vulnerability (CVE-2014-0160) ‹ Palo Alto Networks BlogPalo Alto Networks Blog

---but against 36397? The PA seems to block the communicaction but i like to confirm there's no problem

Best Regards

Gonzalo

Re: OpenSSL TLS Malformed Heartbeat Request Found - Heartbleed(36397)

HULK — Mon, 01 Sep 2014 14:11:31 GMT

Hello Gonzalo,

PA is having signature for this vulnerability. (OpenSSL TLS Malformed Heartbeat Request Found - Heartbleed(36397), Hence, you are in a safe hand.

FYI:

Thanks

topic OpenSSL TLS Malformed Heartbeat Request Found - Heartbleed(36397) in General Topics

OpenSSL TLS Malformed Heartbeat Request Found - Heartbleed(36397)

Re: OpenSSL TLS Malformed Heartbeat Request Found - Heartbleed(36397)