Vulnerability found on Firewall Need to address

@sahul.hameed I saw you had the question posted on the Live community as well.

One person stated that the JQuery issue was to be resolved in 9.1.8. Not sure how they know that, but it looks like release notes only go to 9.1.7

I received this information from an internal resource at PAN, this appears to have been found and fixed internally, so no external documentation as far as I have found

9.1.5 has a fix as well

Hi Reaper,

It was scanned on MGMT Interface and this HSTS vulnerability is noticed. So what i have understood from your response is that,

If we try to create a certificate for that MGMT interface IP with strong encryption algorithm (i.e. For eg ECDSA) and then configure a SSL/TLS profile with a minimum version set to TLS 1.2 and then map this SSL/TLS profile on the Management configuration of the Firewall is this correct. if not, please correct if my understanding is wrong or i have misunderstood.

Awaiting for your reply !!

Scanner used --> Nessus Vulnerability Scanner

Best Regards,

Sahul Hameed

Hi Sahul The issue you reported is documented as a problem in GlobalProtect and was fixed in PAN-OS 8.0.8 Since you did not provide much details, i have to guess what would be a good next step for you ;) If it's the management interface, make sure a strong server certificate is importer and then create an ssl/tls server profile with the certificate and 'minimum version' set to tls 1.2

Which version of PAN-OS are you on and which 'portal' is reporting this (gp, management,...) You may need to upgrade your firewall, have you reviewed release notes? https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-release-notes.html https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-release-notes.html https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-release-notes.html