- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
09-07-2010 04:25 AM
Hi, our Palo Alto has detected the threat:
Name: | Trojan/Win32.dropper.bxzq |
ID: | 2723653 |
Description: | This signature detected Trojan/Win32.dropper.bxzq |
Severity: |
But if I try to find this threath by name or ID in Threat Database it doesn't exist, how is it possible?
At the same time the Palo Alto has detected
MAIL: User Login Brute-force Attempt | |
ID: | 40007 |
Description: | This event indicates that someone is using a brute force attack to gain access to mail server through smtp/pop3/imap authentication request. |
Severity: |
But in Threat Reports, vulnerability it doesn't exist even though in Logs, Threat it appears like "vulnerability".
Could you explain this??
Thank you in advance
Samuel
09-07-2010 10:46 AM
Hi Samuel,
As to your first question, it appears you are running 3.1 software release... the viruses for this release are not yet uploaded on our support site and as such you are not able to find that information. We are working on this and would post a note on knowledge point when this is done. Thanks for your patience,
As to your second question, the ID may not have been included in the "vulnerabilities" threat report as the report contains top 50 vulns only and depending upon whether the particular vulnerability made to the top 50 vulns, it may not have been included in the report. Did you have 50 vulnerabilities reported in the vulnerability threat report?
Thanks,
Sandeep
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!