TID 95187 is not on my signature list

[emr_1]

Hi,
The question is related to following vulnerability: https://security.paloaltonetworks.com/CVE-2024-3400

In this it said "Recommended Mitigation: Customers with a Threat Prevention subscription can block attacks for this vulnerability by enabling Threat ID 95187 (introduced in Applications and Threats content version 8833-8682)."

However, when I update content signature to the latest ( which is 8833-8682 ), and then try to create new vulnerability profile with specifying 95187 only, it does not shows me 95187.

With ID range, the result is as below

I'm sure there is ID 95187 because I can check via CLI.

admin@PA-410> show system info | match app-version
app-version: 8833-8682
admin@PA-410> show threat id 95187


This signature detects malicious payload in HTTPS request.


critical
Unknown
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat-prevention

admin@PA-410>

NOTE:  I can replicate this condition with other platforms too.

How can I create this vulnerability profile for mitigation?

[UmerSalahuddin]

We are using Threat Prevention subscription license in our environment. We are also not seeing Threat ID 95187 even though 8833-8682 Content version is installed. Does Threat ID 95187 only appear if we use Advanced Threat Prevention Subscription

License?

[ymiyashita]

It works with Threat Prevention subscription. The GUI issue is not due to Advanced Threat Prevention Subscription missing.