Why is there a Maximum PAN-OS Version for signatures?

[ddaniels]

Hi,

Why is there a Maximum PAN-OS Version for some signatures? How can I tell if newer versions of PAN-OS can detect the same thing?

E.g. I saw this:

Modified Anti-spyware Signatures (1)

Severity	ID	Attack Name	Default Action	Minimum PAN-OS Version	Maximum PAN-OS Version
high	20000	Conficker DNS Request	alert	3.0.0	4.1.0.0

Thanks,

     Drew Daniels

[sraghunandan]

I could find the same signature on 5.0.9 as well. So i guess for now we need to consider and go by only the minimum version.let me look further into it.

[sraghunandan]

One more thing that i Observed from the release notes was the maximum versions are stated only for modified signatures .

[mikand]

There was a similar thread recently.

From what I understand it means that the modification only applies for PANOS 3.0.0 - 4.1.0.0.

That is if you run 4.1.1 or 5.0.x etc then there was no modification.

Could be good to know if you suddently starts to get alarms after the update is applied.

[panos]

Yes I agree with you.That is about modification.