Blank Threat Description

[apackard]

I'm running Panorama 4.1.6 and am getting threat entries in the logs with no name/description (the attack id is simply repeated in the name field).

This is mainly for custom threats (they do include real names and descriptions in the custom objects), but I also have some 'factory' signatures - viruses - doing the same.

My Threat/App packages are all up to date, and the custom signatures were created on Panorama and shared to the PA devices.

Anyone know of any known causes of this?

Cheers

[jdelio]

2 quick questions for you..

1. Has this ever worked that you can remember? Does it show anything different if you pull up the info on the Firewall itself?

2. Has this Panorama been involved in an upgrade recently?

Regards.

[apackard]

Hi,

1)  I'm 99% sure that the custom signatures have worked - can't be 100% as it's been a while, but I'm as sure as can be.  I can't guarantee the specific viruses that are displaying properly have displayed previosuly, but can say that most viruses are showing.

2) Yes, we've had a few upgrades in the past 12 months, but I can't remember what version we were running when the custom sig's were made.

Rgds

[jdelio]

If you have upgraded, then you might have to re-create the custom threats, as something might have been "lost" in the upgrade. Re-creating them on the newer version should update everything as needed.  I would start with 1 that you know is showing up more often.

[apackard]

I've re-created and it's slightly better - we get correct display on the firewalls themselves but not within Panorama (despite the fact that everything was created in Panorama!).

[jdelio · Accepted solution]

Then if you have not already, please open a case with support to address this issue.

Kind Regards