Log4j - Web Scanning Tool and Protection verification - 2 Min work.

[Shay_Levin]

Watch the 2 min video to get all the details.

Super easy to check if your public applications are protected.

Webtool Scanner is available here

For all the technical information on Log4j click here

[K_montalvo]

Very nice!  another tool to have!

[XBensemhoun]

Bravo!

[_Val_]

Brilliant!

[zarkathus]

Nice!

The IPS Protection is valid only for http/80?

Regards, 

[_Val_]

Also, for HTTPS, if inspection is enabled.

[zarkathus]

Thank you for your reply. 

I can see only IPS Prevent logs on http/80, even with the HTTPS Inspection on cluster enabled. 

Regards, 

[Shay_Levin]

For ingress SSL inspection, you will need to upload the certificate( Cer + private key)  that is being used on your webserver to the cp management.

The gateway needs the private key for decryption, without that, the gateway it blind.

[_Val_]

Do you have HTTPSi inbound inspection rules for the server in question?

[HeikoAnkenbrand]

Nice tool. Thanks!

[Chris_Atkinson]

Thanks for making this available for the community!