OpenSSL TLS Malformed Heartbeat Request Found - Heartbleed(36397)

[SOC_CSG]

Hello

I have a PA-2050 with PanOS 5.0.8 and I get this message today

"THREAT,vulnerability,1,2014/08/31 16:32:08,216.75.XX.XX,213.0.XX.XX,216.75.XX.XX,10.1.5.92,Access webprv,,,ssl,vsys1,Untrust,DMZ,ethernet1/3,ethernet1/1.938,ACUNTIA,2014/08/31 16:32:13,207017,1,41570,443,41570,443,0x400000,tcp,reset-server,"",OpenSSL TLS Malformed Heartbeat Request Found - Heartbleed(36397),any,medium,client-to-server,40719923,0x0,United States,Spain,0,"

I knew that PaloAlto is protected againts HeartBleed 36416

Palo Alto Networks Addresses Heartbleed Vulnerability (CVE-2014-0160) ‹ Palo Alto Networks BlogPalo ...

---but against 36397? The PA seems to block the communicaction but i like to confirm there's no problem

Best Regards

Gonzalo

[HULK]

Hello Gonzalo,

PA is having signature for this vulnerability. (OpenSSL TLS Malformed Heartbeat Request Found - Heartbleed(36397), Hence, you are in a safe hand.

FYI:

Thanks