Options

log4j get slipping past ips

Steve_ESteve_E
in Technical Discussion

IPS isn't tagging this:

I opened a ticket at tech support:

feature request (FBX-23882) to have IPS detect the threat even when the URI is obfuscated.

Comments

  • Options
    james.carsonjames.carson Moderator, WatchGuard Representative

    @Steve_E
    It looks like your case already made it to my team, and the feature request was already done -- if anyone else would like to follow this please create a case and mention FBX-23882 -- the tech can set the case up to notify you of any changes to that request.

    -James Carson
    WatchGuard Customer Support

  • Options
    Steve_ESteve_E

    latest status says this is still pending fix

  • Options
    Bruce_BriggsBruce_Briggs

    IPS signatures come from Trend Micro.
    https://www.watchguard.com/wgrd-partners/oem-partners

    So presumably, Trend Micro has not provided a signature to address this yet.

  • Options
    Steve_ESteve_E

    Tech support says it got fixed a couple of months ago, but forget to tell me.

    I tested this morning and it looks fixed.

Sign In to comment.