PCI DSS testing failure

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

PCI DSS testing failure

L0 Member

We are using SecurityMetrics to test for PCI compliance and have recently started receiving a failure based on TCP/IP Initial Sequence Number (ISN) Reuse Weakness (CVE-2002-1463) for the PaloAlto firewall (5.0.8).

I'm not sure how to remedy the problem within the firewall. There have been no rule changes that should have caused this to start to occur but we have updated the firewall from previous release.

5 REPLIES 5

L0 Member

It actually happened twice and I ended up reporting the findings as false positives on both occasions. I provided some documentation/information etc. The finding was corrected after an upgrade past the 9.1.13.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!