04-11-2011 06:57 AM
Since 3.1.8 the PAN do not identificates the Eicar "virus" in all cases. The loading from https://secure.eicar.org/eicarcom2.zip will be possible, but the same file with http://www.eicar.org/download/eicarcom2.zip will be blocked reliably.
04-11-2011 03:26 PM
I would look at the SSL decryption. Tested it plenty of times, worked reliable every time.
04-12-2011 01:10 AM
michael.schumak schrieb:
I would look at the SSL decryption. Tested it plenty of times, worked reliable every time.
https://secure.eicar.org/eicar_com.zip is blocked. Seems to be a disfunctionality with https and "double-zip". Curiously this morning https://secure.eicar.org/eicarcom2.zip is blocked too.
It is not the first time, i can see an erratic behaviour of the system. In case of doubt, the firewall should normaly block the data stream. I am not sure, if Palo Alto Networks assure that in every case.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
