Woodford support for 5xx models

srodney — Thu, 11 May 2023 19:11:02 GMT

Our partner is trying to confirm we support the 5xx models in Woodford 5.2.0.0, specifically related to testing the Enhanced Firewall features. Can someone confirm the 5xx models are supported in Woodford? Thanks!

Testing Enhanced Firewall Services VCO58 Version 5.2

joncastro — Fri, 05 May 2023 10:29:19 GMT

We are trying to test the Advance Threat Protection using vco58 which already has 5.2 version using Edges with 5.2 version too. We have been doing some testing but the Edge does not detect any malware.

I’ve tried to download malware files using curl on a client behind an Edge from http://www.tekdefense.com/downloads/malware-samples/ https://www.eicar.org/download-anti-malware-testfile/ https://docs.paloaltonetworks.com/advanced-wildfire/administration/configure-advanced-wildfire-analysis/verify-wildfire-submissions/test-a-sample-malware-file

but nothing is detected by the Edge. Are we missing anything important? What is the expected behaviour?

We are using the following configuration which enables Enhanced Firewall Services and IDS/IPS is enabled on the allowAny firewall rule.

New board topics in SASE 5.2.0 Beta

Woodford support for 5xx models

Testing Enhanced Firewall Services VCO58 Version 5.2