THREAT VIRUS IS NOT DETECTED ON HTTP-PROXY

[alle]

hello,

I have a problem in 4.0.9 and 4.1.3 with PA4020 is not possible to detect virus in transparent mode on HTTP-PROXY application. but with L3 interface or with HTTP application  they are no problem. Someone can see the same PROBLEM??

[jseals]

Hi Alle,

I'd like to just get some clarification if you don't mind.

You've tested on 4.0.9 and 4.1.3 that when passing a virus through a HTTP Proxy going through vwire, we don't trigger anything. However, when doing the same test in a L3 environment, we do trigger?

Please let me know if this is the case, and I'll try to do some more research on it.

Thanks,

Jason Seals

[alle]

Hi Jason,

yes this is the case. I had already open a ticket for this problem but Palo-alto close the case because i had no time to provide logs of my costumer. But today I try to open a new case with schema and new capture!

[jseals]

Alle,

Good, I'll look for the case as I'm curious of the outcome.

Thanks,

Jason Seals