log4j get slipping past ips

IPS isn't tagging this:

I opened a ticket at tech support:

feature request (FBX-23882) to have IPS detect the threat even when the URI is obfuscated.

Comments

  • james.carsonjames.carson Moderator, WatchGuard Representative

    @Steve_E
    It looks like your case already made it to my team, and the feature request was already done -- if anyone else would like to follow this please create a case and mention FBX-23882 -- the tech can set the case up to notify you of any changes to that request.

    -James Carson
    WatchGuard Customer Support

  • latest status says this is still pending fix

  • IPS signatures come from Trend Micro.
    https://www.watchguard.com/wgrd-partners/oem-partners

    So presumably, Trend Micro has not provided a signature to address this yet.

Sign In to comment.