SSL Renegotiation Denial of Service Vulnerability

[bhavin_bhatt]

Hi All,

I have received an Alert for SSL Renegotiation Denial of Service Vulnerability.

I have visited the website, and for some reason, Palo Alto thinks i am the attacker,

and the website i am visiting is the victim.

I have attached screen shots of this issue, please help me in understanding this issue/threat.

I am not sure how to treat it and why Palo Alto will Alert me.

Cheers

Bhavin

[skrall]

Bhavin,

You should open a case with support. This may be a false positive. Information support will need:

- Threat logs

- output of "show system info"

- Is there a URL involved that triggers this regularly?

- If possible, a sniffer trace at the client showing the traffic to the site generating the alert.

Steve Krall

[bhavin_bhatt]

Thanks ...

WIll open a case with support

cheers

Bhav