application ver 390

Announcements

ATTENTION Customers, All Partners and Employees: The Customer Support Portal (CSP) will be undergoing maintenance and unavailable on Saturday, November 7, 2020, from 11 am to 11 pm PST. Please read our blog for more information.

Reply
Highlighted
L6 Presenter

application ver 390

Hi,

We informed that 390 was released but I could not find it on dynamic updates.Any problem with that version ?

we had some ssl problem but I don't know if it is related to that or not


Accepted Solutions
Highlighted
L4 Transporter

Yes, there is some issue with the version 390. Engineering is currently working on it. Issue is that the SSL sites are being categorized as "private-ip-addresses" after upgrading the content to version 390.

View solution in original post


All Replies
Highlighted
L4 Transporter

Yes, there is some issue with the version 390. Engineering is currently working on it. Issue is that the SSL sites are being categorized as "private-ip-addresses" after upgrading the content to version 390.

View solution in original post

Highlighted
L7 Applicator

Hi Panos,

You are right, There is an issue with content version 390. That is why content 390 has been revoked.

BUG opened as - Content 390 SSL sessions generating invalid URL filtering host entries.

Issue reported as:-  "SSL sites are being categorized as 'private-ip-addresses' after upgrading content to version 390". Only IE8 seems to be affected.... Chrome, Firefox and IE9 seem to be not be affected.

Hope this helps.

Thanks

Highlighted
L4 Transporter

As of now, workaround would be to revert to content version 389 or do not block 'private-ip-address' category. 

Highlighted
L6 Presenter

Thanks for updates.

Now resolved the issue with reverting.Thanks for help.

Highlighted
L7 Applicator

Hi Panos,

One recommendation for you you:  Please remove the schedule "download and install" option /change it to download only ( If you have set download and install set to your PAN firewall.)

   

So it looks like  the 390 content is still available for download , if it has been once downloaded by a firewall previously .  Because content 390 is still available on support.paloaltonetworks.com.

Engineering is still working on it and i will keep you updated for the same.

   

Thanks

Highlighted
L6 Presenter

Hi,

Thanks for update and help.

Regards.

Highlighted
L6 Presenter

*mumbles something about what happend to quality assurance*...

Highlighted
L4 Transporter

We saw about 500,000 log entries with a URL value of %16%03%01/  resulting in them being categorized as Private IP Address.  Caused some problems where URL filtering policies were more explicit.  Disappeared when we reverted to ver 389.  Put in a case and the content was pulled shortly.  Made the URL logs useless for troubleshooting or reporting.

Phil

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!