on 01-04-2018 07:25 PM - edited on 01-26-2018 11:41 PM by Retired Member
Compatibility: All the currently supported product lines (3.4, 4.0, and 4.1) were tested running on all the supported Operating System versions and certified to be compatible with the Microsoft Security updates. Note that the tests were performed on both physical and virtual machines.
Find more information around Supported Operating Systems and Platforms on our Compatibility Matrix.
Microsoft patch: Traps is compatible with the patches Microsoft released to fix CVE-2017-5753, CVE-2017-5715, and CVE-2017-5754 vulnerabilities.
Apple patch: Traps is compatible with macOS High Sierra 10.13.2 Supplemental Update including security improvements to Safari and WebKit to mitigate the effects of CVE-2017-5753 and CVE-2017-5715.
Customers requiring assistance with the upgrade, or assistance with older versions can reach out to the Palo Alto Networks Support team. Find the Support contact for your region at https://www.paloaltonetworks.com/company/contact-support
Friday, Jan. 12, 2018
Tuesday, Jan. 23, 2018
Friday, Jan. 26, 2018
I'm confused on two points,
1. Are we required to manually Unregister Traps from Microsoft Security Center in order to patch?
As per Microsoft, "Microsoft is only offering the Windows security updates released on January 3, 2018 to devices running anti-virus software from partners who have confirmed their software is compatible with the January 2018 Windows operating system security update." ...
2. Has Traps been verified with Microsoft as being compatible?
There is no confusion.
Traps is compatible to the patch, paloalto tested it. But Microsoft does not allow to update if a AV is installed in general for this patch. At the moment they do not distinguish between the AV vendors. Perhaps paloalto can set the compatibility flag in future. Or MS would set if they have the information from the AV vendors.
i hope this helped
Please tell us there is an upcoming traps update/policy/etc that will set this compatibility flag. Some of our devices we don't have registry control over.
why does Palo not set the compat flag? We are told to get rid of our AV and traps is fine as a standalone AV product. It even shows up in MSC now.
So act like a real AV vendor and set the flag if your software is compatible..