Access Palo Alto HTML Files

[DennyChanditya]

Hello, our user want to deploy Palo Alto Firewall 3410 with Os 10.2.2, for security reason then they do the vulnerability assessment but using different device but with same OS 10.2.2.

And the result is that they found 2 vulnerabilityissues, low and information.

i took this VA is on the login page on palo alto firewall.

The Low vulnerabilityis about 'autocomplete' attribute is not disabled on password fields.

and the Information vulnerabilityis about robots.txt, that they recommed to limit that access to that file.

what i want to ask, is that possible to edit the html files for fix this low vulnerability?

is there any docs so i can fix this vulnerability?

[SCantwell_IM]

Hello there. 

The Live Community are volunteers and end users of the product, who come together to assist others.
I have not heard of any way to modify the "base" html files on the PANOS.
You would need to submit a feature request through your local PANW SE.
That is the correct process to follow.

[DennyChanditya · Accepted solution]

Since i didn't find any docs about how to edit base html files on PanOS/mitigate this problem, so I just open ticket in support portal.

And they do the checking on html files. 

the result for the low vulnerability is It seems false positive if the scanner is detecting it. The browsers can save the password regardless of the autocomplete ='off' and  o be the scanners.

and for the information vulnerability with robot.txt is The contents of the robots.txt does not reveal any information about the secret path directories. This hints to disallow everything from the root '/', so no specific directories to allow or disallow.