12-15-2021 05:03 PM
As most are aware, Panorama running 9.x are affected by log4j vulnerability. The security advisory mentions "This issue is only applicable to Panorama hardware and virtual appliances that have run in Panorama Mode or Log Collector Mode as part of a Collector Group. Panoramas running in Management Only Mode are not impacted."
Does anyone know if Panoramas running in "legacy mode" are affected?
12-16-2021 03:46 PM
Hello @securehops
there was an update from Palo Alto regarding "Legacy" Panorama Mode: https://security.paloaltonetworks.com/CVE-2021-44228
It is listed as not impacted:
Panoramas running in Management Only mode or Legacy mode, including those used for Prisma Access, are not impacted.
Kind Regads
Pavel
12-16-2021 04:28 AM
is PAN-OS v8.0.18 affected with log4j CVE-2021-44228 vulnerability ? Can anyone confirm me please .
12-16-2021 07:21 AM
@singhpradeep25 not sure but 8.0 is end of life for almost 2 years now. I would recommend you upgrade
12-16-2021 03:46 PM
Hello @securehops
there was an update from Palo Alto regarding "Legacy" Panorama Mode: https://security.paloaltonetworks.com/CVE-2021-44228
It is listed as not impacted:
Panoramas running in Management Only mode or Legacy mode, including those used for Prisma Access, are not impacted.
Kind Regads
Pavel
12-16-2021 05:22 PM
thanks @PavelK I confirmed the same with support today. Thanks for the link
12-17-2021 01:48 AM
@securehops @PavelK Thanks for quick response . I will upgrade it .
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
