Update application v 339

[franck.lichnowski]

Hello,

Since I have updated my active/passive cluster with latest Application and threat content (version 339, released yesterday), some ssl traffic is now recognized as "tor" application.

This traffic is only ssl, not tor.

Is someone else have this problem ??

I have 2 PA-4020 version 4.1.9.

I open a case for this with my network integrator.

I returned to the version 338, it solve the problem.

Regards,

Franck.

[hsmdsdl]

Hi,

we have the same problem..

Hochschule Magdeburg

PA-4050, 4.1.8

Regards,

Manfred

[Nico]

Same here, PA-5050 cluster, 4.1.9

[KGC]

Same problem here, rolling back to 338. Anyone open a case on this with PA yet?

[hallje]

Same issue here..  Rolled back to 338.. just opened a case with PA.

[KGC]

Thanks - rolling back to 338 here as well, figured no point us all opening the same so long as you tell them it's not just an isolated case.

[hallje]

Yep.. they're aware.  Already got an email back from our SE saying it's a false positive and we should be seeing a re-release with a fix shortly.

[KGC]

Great - thanks for the update.

[shasnain]

Hi Guys,

For what we have learned so far through cases are that the following apps are being mis-classified as Tor:

Cisco vpn

Imap

Roku

Radius

Citrix apps

Please revert back to last content version. We are in the process of pulling the content version from the update server until we fix this problem.

Thanks,

Syed Hasnain

[KGC]

Are you missing SSL from that list?

[shasnain]

Yes,

SSL should be in the list too.

Thanks,

Syed Hasnain

[mikand · Accepted solution]

Version 340 was released a few hours ago:

"

Note: This content release fixes an issue in content version 339 where some SSL traffic was being misidentified as tor.

"