log4j get slipping past ips
IPS isn't tagging this:
I opened a ticket at tech support:
feature request (FBX-23882) to have IPS detect the threat even when the URI is obfuscated.
0
Sign In to comment.
IPS isn't tagging this:
I opened a ticket at tech support:
feature request (FBX-23882) to have IPS detect the threat even when the URI is obfuscated.
Comments
@Steve_E
It looks like your case already made it to my team, and the feature request was already done -- if anyone else would like to follow this please create a case and mention FBX-23882 -- the tech can set the case up to notify you of any changes to that request.
latest status says this is still pending fix
IPS signatures come from Trend Micro.
https://www.watchguard.com/wgrd-partners/oem-partners
So presumably, Trend Micro has not provided a signature to address this yet.
Tech support says it got fixed a couple of months ago, but forget to tell me.
I tested this morning and it looks fixed.