After Juniper and Fortinet...

[santonic]

What are the chances PA will be next with backdoor revealed? 🙂

[reaper]

my money is on 'no chance' 😉

although this is a good time for a reminder that good security starts at the administrator: make sure management interface is unreachable from unauthorized networks, use strong passwords, change passwords regularly, perform thorough accounting of administrative access, educate users, ... 😉

Tom

[rbista]

so there is no hard-coded root account or backdoor in the system? 

[santonic]

Still waiting for some official response 🙂 Or emergency patch 🙂

[pulukas]

If you really do want an official reply your best path is to contact your sales engineer.  Palo Alto in general is very careful about their public statements.  But are much more open in private conversations with customers, especially if your company has agreed to the NDA.

[bmorris1]

rbista... there are some hidden accounts. If you run a firewall on specific software version (sorry I can't remember which one but you can check the release notes for the fix to determine it) you can run the command 'show admins all' and it will display hidden admins accounts. My understanding is that these are specific accounts designed for certain processes to use though, that is why they are kept hidden.

Ben