Remote Command Execution Vulnerability

[pyrainath]

Hi,

We have detected so may critical vulnerability in our firewall . i have attached the screenshots. 

1.is there a way to avoid these kind of traffic?

2.where can i find more about how to block these kind of traffic?

[kiwi · Accepted solution]

Hi @pyrainath ,

Using TID 58474 as an example. 

As you can see you will find this TID in a vulnerability profile:

In this case the default action is "Reset-Both" but you can change it to whatever action you would like to configure:

Don't forget that you need to assign the vulnerability profile to your security rules so that the appropriate actions apply:

With the appropriate security profiles in place you're already better protected.

The following DOC is a good resource to create best practice security profiles:

Create Best Practice Security Profiles

Kind regards,

-Kim.