About thanawat_l

thanawat_l · ‎08-11-2022

Dear all, PAN-OS CVE-2022-0028 PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering (Severity: HIGH) https://security.paloaltonetworks.com/CVE-2022-0028 About CVE-2022-0028 on Palo Alto vulnerability. If we have policy that config source with any because we use shared policy for all vsys. If we config source address with internal customer ip. It will have any effect from this vulnerability because if internet ip come to policy it will not match and go to deny policy. Thank you for your answer.

thanawat_l · ‎08-02-2022

Thank you for your solution.

thanawat_l · ‎06-28-2022

Hi @PavelK , Thank you for your answer.

thanawat_l · ‎06-26-2022

Hi @Astardzhiev , Thank you for your answer.

thanawat_l · ‎06-23-2022

Hi, In firewall version 8.1, Can we input address range directly to security policy source and destination? Thank you.

thanawat_l · ‎08-09-2021

Hi @vsys_remo Thank you for your answer.

Member Since	‎08-08-2021 08:03 PM
Date Last Visited	‎08-12-2022 01:50 PM
Posts	11

Online Status	Offline
Date Last Visited	‎08-12-2022 01:50 PM

About thanawat_l

Question about CVE-2022-0028 PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering (Severity: HIGH)

Re: IPV6 | How can I create policy for allow destination ip v6 public ip address

Re: IPV6 | How can I create policy for allow destination ip v6 public ip address

IPV6 | How can I create policy for allow destination ip v6 public ip address

Re: Best practice for allow Internet IP

Re: IPV6 | How can I create policy for allow destination ip v6 public ip address

Re: Best practice for allow Internet IP

Re: Can we input address range directly to security policy source and destination

Re: Can we create and disable static route and re enable again with option no-install

Nominated Discussion: Best Practice for Allow Internet IP

Nominated Discussion: Input an Address Range Directly to a Policy

Question about CVE-2022-0028 PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering (Severity: HIGH)

Re: IPV6 | How can I create policy for allow destination ip v6 public ip address

Re: Best practice for allow Internet IP

Re: Can we input address range directly to security policy source and destination

Can we input address range directly to security policy source and destination

Re: Can we create and disable static route and re enable again with option no-install