topic Re: Log4j - Web Scanning Tool and Protection verification - 2 Min work. in Firewall & Security Management

Log4j - Web Scanning Tool and Protection verification - 2 Min work.

Shay_Levin — Mon, 20 Dec 2021 12:15:29 GMT

Watch the 2 min video to get all the details.

Super easy to check if your public applications are protected.

Webtool Scanner is available here

For all the technical information on Log4j click here

K_montalvo — Thu, 16 Dec 2021 16:25:43 GMT

Very nice! another tool to have!

XavierBens — Fri, 17 Dec 2021 13:53:19 GMT

Bravo!

_Val_ — Tue, 21 Dec 2021 15:07:14 GMT

Brilliant!

zarkathus — Thu, 30 Dec 2021 13:12:50 GMT

Nice!

The IPS Protection is valid only for http/80?

Regards,

_Val_ — Thu, 30 Dec 2021 14:08:59 GMT

Also, for HTTPS, if inspection is enabled.

zarkathus — Thu, 30 Dec 2021 14:11:17 GMT

Thank you for your reply.

I can see only IPS Prevent logs on http/80, even with the HTTPS Inspection on cluster enabled.

Regards,

Shay_Levin — Thu, 30 Dec 2021 14:17:58 GMT

For ingress SSL inspection, you will need to upload the certificate( Cer + private key) that is being used on your webserver to the cp management.

The gateway needs the private key for decryption, without that, the gateway it blind.

_Val_ — Thu, 30 Dec 2021 14:19:00 GMT

Do you have HTTPSi inbound inspection rules for the server in question?

HeikoAnkenbrand — Thu, 30 Dec 2021 22:20:21 GMT

Nice tool. Thanks!

Chris_Atkinson — Sat, 01 Jan 2022 01:42:54 GMT

Thanks for making this available for the community!

MtxMan — Mon, 13 Jun 2022 16:20:17 GMT

Hi @Shay_Levin i think scanner website is down, i cant access right now. or still on maintenance mode?

Shay_Levin — Thu, 16 Jun 2022 11:27:24 GMT

yes, i shut it down a few weeks ago as I saw the usage is really low, i guess Log4j is old news 🙂

There are many options available to make this test online , just google it