topic Legitimate URLs Blocked with Recent AV Update in General Topics https://community.checkpoint.com/t5/General-Topics/Legitimate-URLs-Blocked-with-Recent-AV-Update/m-p/3520#M219 <HTML><HEAD></HEAD><BODY><P>An Anti-Virus signature was recently published that caused a number of legitimate sites to be blocked, impacting gateways worldwide.</P><P>Specifically, you will see the following symptoms:</P><P></P><UL style="color: #000000; background-color: #ffffff; font-size: 14px;"><LI>Anti-Virus blocks legitimate traffic with DNS trap or DNS reputation logs.</LI><LI>Many logs of Anti-Virus are getting created on DNS trap and DNS reputation with the protections "REP.ikjuju" and "REP.ikktgp".</LI></UL><P></P><P>Check Point has removed the relevant signature from the database. Perform the steps in the following SK to ensure the AV database is updated:&nbsp;<A class="link-titled" href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk117852" title="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk117852">Anti-Virus blocks legitimate traffic with DNS trap or DNS reputation logs</A>&nbsp;</P></BODY></HTML> Mon, 05 Jun 2017 05:56:46 GMT PhoneBoy 2017-06-05T05:56:46Z Legitimate URLs Blocked with Recent AV Update https://community.checkpoint.com/t5/General-Topics/Legitimate-URLs-Blocked-with-Recent-AV-Update/m-p/3520#M219 <HTML><HEAD></HEAD><BODY><P>An Anti-Virus signature was recently published that caused a number of legitimate sites to be blocked, impacting gateways worldwide.</P><P>Specifically, you will see the following symptoms:</P><P></P><UL style="color: #000000; background-color: #ffffff; font-size: 14px;"><LI>Anti-Virus blocks legitimate traffic with DNS trap or DNS reputation logs.</LI><LI>Many logs of Anti-Virus are getting created on DNS trap and DNS reputation with the protections "REP.ikjuju" and "REP.ikktgp".</LI></UL><P></P><P>Check Point has removed the relevant signature from the database. Perform the steps in the following SK to ensure the AV database is updated:&nbsp;<A class="link-titled" href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk117852" title="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk117852">Anti-Virus blocks legitimate traffic with DNS trap or DNS reputation logs</A>&nbsp;</P></BODY></HTML> Mon, 05 Jun 2017 05:56:46 GMT https://community.checkpoint.com/t5/General-Topics/Legitimate-URLs-Blocked-with-Recent-AV-Update/m-p/3520#M219 PhoneBoy 2017-06-05T05:56:46Z Re: Legitimate URLs Blocked with Recent AV Update https://community.checkpoint.com/t5/General-Topics/Legitimate-URLs-Blocked-with-Recent-AV-Update/m-p/3521#M220 <HTML><HEAD></HEAD><BODY><P>Since the impact of this was worldwide, as you stated, I'm wondering why the customers were not notified?! We were affected by this. We spent half a day on troubleshooting &amp;&nbsp;fixing the issue. This would've saved us few hours on a Sunday! <img id="smileysad" class="emoticon emoticon-smileysad" src="https://community.checkpoint.com/i/smilies/16x16_smiley-sad.png" alt="Smiley Sad" title="Smiley Sad" /></P></BODY></HTML> Mon, 05 Jun 2017 15:05:23 GMT https://community.checkpoint.com/t5/General-Topics/Legitimate-URLs-Blocked-with-Recent-AV-Update/m-p/3521#M220 Alex_Alborzfard 2017-06-05T15:05:23Z Re: Legitimate URLs Blocked with Recent AV Update https://community.checkpoint.com/t5/General-Topics/Legitimate-URLs-Blocked-with-Recent-AV-Update/m-p/3522#M221 <HTML><HEAD></HEAD><BODY><P>Does anyone know what time Checkpoint release the fixed signature file? &nbsp;Trying to finalize paperwork on this.</P></BODY></HTML> Wed, 05 Jul 2017 20:07:58 GMT https://community.checkpoint.com/t5/General-Topics/Legitimate-URLs-Blocked-with-Recent-AV-Update/m-p/3522#M221 Thomas_Allen 2017-07-05T20:07:58Z