IPS protection CVE-2021-22893

[MagicVince]

Hi 

Can you please let me know when we will get the ips protection for CVE-2021-22893?

[Danny]

Check Point supports Snort IPS rules. Snort already has rules against Pulse Secure CVE-2021-22893.

[Koby_Fiada]

Hi Daniel,

Can you provide a link to the SNORT signature?

Thanks.

[Timothy_Hall]

How to import & work with SNORT signatures is pretty well documented in the "Threat Prevention Administration Guide" for your relevant code version.  Also customizing Severity/Confidence/Performance Impact for imported SNORT signatures is pretty common, see here: sk113895: Setting custom Severity, Confidence or Performance Impact for imported Snort signatures

A guide to writing custom SNORT rules: Writing Effective Rules, Part I 

[genisis__]

Surely there should be an IPS signature for this, rather then importing a snort signature?  I would hope Checkpoint is going to release this dame quick, if not why are we paying for an expensive IPS subscription.