I'm running Panorama 4.1.6 and am getting threat entries in the logs with no name/description (the attack id is simply repeated in the name field).
This is mainly for custom threats (they do include real names and descriptions in the custom objects), but I also have some 'factory' signatures - viruses - doing the same.
My Threat/App packages are all up to date, and the custom signatures were created on Panorama and shared to the PA devices.
Anyone know of any known causes of this?
2 quick questions for you..
1. Has this ever worked that you can remember? Does it show anything different if you pull up the info on the Firewall itself?
2. Has this Panorama been involved in an upgrade recently?
1) I'm 99% sure that the custom signatures have worked - can't be 100% as it's been a while, but I'm as sure as can be. I can't guarantee the specific viruses that are displaying properly have displayed previosuly, but can say that most viruses are showing.
2) Yes, we've had a few upgrades in the past 12 months, but I can't remember what version we were running when the custom sig's were made.
If you have upgraded, then you might have to re-create the custom threats, as something might have been "lost" in the upgrade. Re-creating them on the newer version should update everything as needed. I would start with 1 that you know is showing up more often.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!