log4j get slipping past ips
IPS isn't tagging this:
I opened a ticket at tech support:
feature request (FBX-23882) to have IPS detect the threat even when the URI is obfuscated.
0
Sign In to comment.
IPS isn't tagging this:
I opened a ticket at tech support:
feature request (FBX-23882) to have IPS detect the threat even when the URI is obfuscated.
Comments
@Steve_E
It looks like your case already made it to my team, and the feature request was already done -- if anyone else would like to follow this please create a case and mention FBX-23882 -- the tech can set the case up to notify you of any changes to that request.
-James Carson
WatchGuard Customer Support
latest status says this is still pending fix
IPS signatures come from Trend Micro.
https://www.watchguard.com/wgrd-partners/oem-partners
So presumably, Trend Micro has not provided a signature to address this yet.
Tech support says it got fixed a couple of months ago, but forget to tell me.
I tested this morning and it looks fixed.