Threat & Vulnerability Discussions

Welcome to the Threat and Vulnerability Discussion Board

Welcome to the Threat and Vulnerability Forum

The purpose of this forum is to discuss security vulnerabilities and threats. Palo Alto Networks believes that understanding todays threat landscape is critical to effectively detecting and preventing cyb

...

PAN DB vs Advanced

Hello ,

Just want to know if PAN-DB and Advanced URL are different licensing

If Advanced URL is purchased , does it cover PAN-DB

We have a customer who puchased Advanced URL , but not PAN DB

High vulnerabilities PAN-OS reported by vulnerability management scan

Hello colleagues:

Good afternoon, hope you are all well.

Some of you have reported these critical vulnerabilities to them, by Nesus Scan:

ProtocolPortNameSynopsisDescriptionSolutionTCP443CGI Generic Command Execution (time-based)It may be possi...

Tcp flood

Hi,

today from 15.10 to 16.10 I received more than 15600 calls from the same IP. The Windows 2012 server already has a function against SYN ATTACK and TCP FLOOD, and I see it on the tcp-rst-from-server log monitor, but they are very small compared to

...

Session Token Extend resource

We are on Version 22.06.197 of the Prisma Cloud. I want to know if there is a resource for session token extension or if there is a workaround other than re-initiating the request for a new token.

The resource for the Authenticate Client I have been

...

Potential false positive AV for MS VisualStudio update

Running into a weird problem with VisualStudio update package being detected as a generic virus after recent update to Threat databases. But I can download the indicated file itself just fine. Anybody know what's going on here? Current AV database 41

...

Resolved! Traffic log Action shows 'allow' but session end shows 'threat'

I looked at several answers posted previously but am still unsure what is actually the end result.

I'm looking at the monitor\traffic and I can see traffic leaving the local network going to the internet that shows the action is 'allow' and but the s

...

False positive - Atlassian Confluence Remote Code Execution Vulnerability 92632

Threat ID 92632 was added late 6/3 for the new Atlassian 0-day exploit. All morning we have been seeing false positives on the new signature. Anyone else seeing the same?

Seems to be alerting to the inclusion of javascript ad code across multiple we

...

Resolved! DNS Sinkhole

Hi guys,

I have Threat prevention license in my PA-3200 Series firewall but when i configure dns sinkhole in antispyware I am getting Warning: "No Valid DNS Security License" during commit, do i need to buy DNS license to work with sinkhole feature

...