Seek to assist to check IPS signature database and update in Palo Alto

[sam_phas]

Dear All,

I am writing this to seek your assist help to check IPS signature database and update in Palo Alto Next-Generation firewall.

Best Regards,

[PavelK]

Hello @sam_phas

thanks for posting.

Would it be possible to provide more details what issue you are facing? Could you also check this KB? This article includes content update best practices.

Kind Regards

Pavel

[sam_phas]

Hello Pavel,

I want to check IPS signature (CVE) database and new released in my Next Generation Firewall. Could you please help me guide how to check it.

Best Regards,

Samphas

[PavelK]

Hello @sam_phas

thank you for reply.

To check what is included in the content update directly from the Firewall you can navigate to: Device > Dynamic Updates, then click on "Release Notes" located on the right hand side. Alternatively, you can get the same from Customer Support Portal: Updates > Dynamic Updates > Release Notes.

Regarding search for specific CVE, you can find it in Threat Vault. Here is KB for reference.

Kind Regards

Pavel

[sam_phas]

Hello Pavel,

--> Firewall you can navigate to: Device > Dynamic Updates, then click on "Release Notes" located on the right hand side.

I did not find above path as you guide. Could you please share as screenshot here.

[PavelK]

Hello @sam_phas

here is screen shot:

Kind Regards

Pavel

[sam_phas]

Hi Pavel,

Yes thank, But I want to ask you is the IPS signature update release in my Firewall. 

Thanks,

Samphas

[ozheng]

Please open a case to TAC (Your device needs to have a valid support plan).

Please specify the CVE you want to know the coverage, and the relevant team will confirm or not its coverage.

Olivier

[sam_phas]

Hi Ozheng,

I just want to know where we can check all the CVE that release in my firewall not only the specify CVE.

Thanks,

Samphas

[ozheng]

Hello Samphas,

Maybe you should approach your PaloAlto account team to get the list of CVEs.
(As Pavel asked earlier, we have no clue of the final use of such request. It can be for information as it can eventually be for performing a cyber attack?)

Olivier

[sam_phas]

Hello Ozheng,

May I know the process of Palo Alto firewall on-premise get new CVE update? and where the CVE is stored in Palo Alto firewall?

Thanks,

Samphas