Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
MagicVince
Explorer

IPS protection CVE-2021-22893

Hi 

 

 

Can you please let me know when we will get the ips protection for CVE-2021-22893?

0 Kudos
4 Replies
Danny
Champion
Champion

Check Point supports Snort IPS rules. Snort already has rules against Pulse Secure CVE-2021-22893.

0 Kudos
Koby_Fiada
Explorer

Hi Daniel,

Can you provide a link to the SNORT signature?

Thanks.

0 Kudos
(1)
Timothy_Hall
Champion
Champion

How to import & work with SNORT signatures is pretty well documented in the "Threat Prevention Administration Guide" for your relevant code version.  Also customizing Severity/Confidence/Performance Impact for imported SNORT signatures is pretty common, see here: sk113895: Setting custom Severity, Confidence or Performance Impact for imported Snort signatures

A guide to writing custom SNORT rules: Writing Effective Rules, Part I 

 

"Max Capture: Know Your Packets" Video Series
now available at http://www.maxpowerfirewalls.com
0 Kudos
genisis__
Advisor

Surely there should be an IPS signature for this, rather then importing a snort signature?  I would hope Checkpoint is going to release this dame quick, if not why are we paying for an expensive IPS subscription.

0 Kudos