Custom Vulnerability to Block Old Browser Versions

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Custom Vulnerability to Block Old Browser Versions

L0 Member

Would anyone know how to properly identify and block old browser versions using custom vulnerability object? I need help with the proper "pattern" to use to be able to identify the version. I know that there is the following guide:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClSOCA0

 

But this guide is generic and detects all chrome version using pattern: "Chrome\/". What if I would like to block specific "Chrome/106.0.5249.119" version? How do I write the pattern? I was only able to successfully use "Chrome\/106 " but I am having issues when I added the rest of the succeeding numbers such as "Chrome\/106\.0\.5249\.119". Any help would be appreciated. 

1 accepted solution

Accepted Solutions

L6 Presenter
3 REPLIES 3

L6 Presenter

Did you try adding adding ( )  (Chrome\/106\.0\.5249\.119) as you are using regex signature match not just Pattern_match operator (https://docs.paloaltonetworks.com/pan-os/u-v/custom-app-id-and-threat-signatures/custom-application-... ). Maybe also see https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-web-interface-help/objects/objects-custom-objec...

Thank you Nikoolayy1, this seemed to resolve the issue and it is now matching what I want. 

L1 Bithead

Hello Team, excuse me 

How I can block a Chrome versions less than or equal to 105, we try whit these: Chrome\/(0|[1-9][0-9]?|10[0-5])\. and these (Chrome/([1-9][0-9]10[0-5])), but isn't working. 

  • 1 accepted solution
  • 4539 Views
  • 3 replies
  • 0 Likes
  • 77 Subscriptions
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!