Threat-version: 434-2198 and new signatures - problem

[_slv_]

Hello

We can read in email "Palo Alto Networks Content Updated" that version 435 give us:

New Vulnerability Signatures (4)

Severity	ID	Attack Name	CVE ID	Vendor ID	Default Action	Minimum PAN-OS Version
low	36421	Phishing Webpage Detection			alert	4.0.0
critical	36442	Malicious Flash file Detection			alert	4.0.0
critical	36443	Apache Structs ClassLoader Manipulation Security Bypass Vulnerability	CVE-2014-0113		alert	4.0.0
critical	36444	Microsoft Internet Explorer Memory Corruption Vulnerability	CVE-2014-1776	MS14-021	reset-client	4.0.0

I have this update installed:

show system info :

treat-version: 434-2198

threat-release-date: 2014/04/29  12:08:29

I'd like to make execptions for 36421 and give for it action block (or reset) but I'm unable to do it. I can't find such id

What I do wrong?

Regards

SLawek

[_slv_]

I 'm unable to select new aplication too:

New Applications (3)

Risk	Name	Category	Subcategory	Technology	Depends On	Previously Identified As	Minimum PAN-OS Version
4	bittorrent-sync	general-internet	file-sharing	client-server	bittorrent,web-browsing	web-browsing, unknown-udp	3.1.0
4	openmeetings	collaboration	internet-conferencing	client-server	flash,rtmp,rtmpt,web-browsing,websocket	web-browsing,websocket,flash,rtmp,rtmpt	3.1.0
1	yik-yak	collaboration	social-networking	client-server	apple-maps,google-maps,ssl,web-browsing	web-browsing,ssl	3.1.0

Could anyone confirm that this is not only my problem?

Regards

SLawek

[licenselu]

Hello,

Running PA500 (5.0.12) with 434-2198.

Same problem here...

Regards,

HA

[FJU-ITCS · Accepted solution]

Hi,

you have installed 434-2198 but the applications come with 435-2208 Version 435 Content Release Notes

Regards,

Frank

[_slv_]

oops You are right Frank.

But the question is why they sending emails with anounce new version when this version isn't available to download. I checked that is something newer than I had alredy installed bofore I create this topic.

Regards

Slawek

[kbe]

The email i recieved was sent at: Date: Tue, 6 May 2014 16:48:15 -0700

Have you checked your update scheduler on the PA for these updates?

[_slv_]

Of course Yes, I did it by clicking Check Now in Dynamic updates section.

Regards

Slawek

[kbe]

Maybe the update server you connected to did not hold the update if you checked short after the release of the notification.

In wich timezone are you?

Did you get the update now?

[_slv_]

Hi KBE

it was probably as You wrote

I'm on CET zone, I got update when I sow Frank response.

Regards

Slawek