- CheckMates
- :
- Products
- :
- General Topics
- :
- Legitimate URLs Blocked with Recent AV Update
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Legitimate URLs Blocked with Recent AV Update
An Anti-Virus signature was recently published that caused a number of legitimate sites to be blocked, impacting gateways worldwide.
Specifically, you will see the following symptoms:
- Anti-Virus blocks legitimate traffic with DNS trap or DNS reputation logs.
- Many logs of Anti-Virus are getting created on DNS trap and DNS reputation with the protections "REP.ikjuju" and "REP.ikktgp".
Check Point has removed the relevant signature from the database. Perform the steps in the following SK to ensure the AV database is updated: Anti-Virus blocks legitimate traffic with DNS trap or DNS reputation logs
2 Replies
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Since the impact of this was worldwide, as you stated, I'm wondering why the customers were not notified?! We were affected by this. We spent half a day on troubleshooting & fixing the issue. This would've saved us few hours on a Sunday!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Does anyone know what time Checkpoint release the fixed signature file? Trying to finalize paperwork on this.
