Meltdown and Spectre, Traps compatibility?

[Tobi]

The most important topic these days is the processor flaw.

Microsoft already released a security update but states out that there may be compatibility issues with some anti-virus applications: https://support.microsoft.com/en-us/help/4072699/important-information-regarding-the-windows-securit...

Is it safe to install the Windows update with Traps 4.1.2 running?

[thinson]

Same questions for running Traps 4.0.4

[erikar]

I have the same question for Traps 4.1.1.

[rperezBM]

Same for 4.0.1

[jhoge]

4.1.2 here, also needing an update on this.

Kevin Beaumont is maintaining a spreadsheet on AV compatibility, but unfortunately, there is no word from PAN yet about Traps.

https://www.reddit.com/r/sysadmin/comments/7o2q28/av_compatibility_with_windows_patches_for/

https://docs.google.com/spreadsheets/d/184wcDt9I9TUNFFbsAVLpzAtckQxYiuirADzf3cL42FQ/htmlview?sle=tru...

[thinson]

I have asked our Traps account team and they are working on getting an answer. I'll be sure to update the thread if I hear anything.

[thakala]

I have patched Windows Server 2016 running Traps 4.1.2, no issues so far. Required registry key was added on this system automatically so patch was downloaded automatically from Windows Update.

On Windows 10 Desktop running Traps 4.1.2 I had to add required registry key manually to download Windows Patch. Once key was added Windows Update was able to see new patch and I installed it. I am typing this message on patched Windows 10 running Traps 4.1.2 and no issues so far, I even intentionally triggered a Wildfire execution block (no blue screen etc) but I have not tested actual exploit preventions.

But to be sure I would wait an official statement from PANW.

[csidwellsm · Accepted solution]

Here is the latest information. https://live.paloaltonetworks.com/t5/Endpoint-Articles/Steps-to-Apply-Microsoft-Patch-to-Addressed-M...