Log4j - Web Scanning Tool and Protection verification - 2 Min work.

[Shay_Levin]

Watch the 2 min video to get all the details.

Super easy to check if your public applications are protected.

Webtool Scanner is available here

For all the technical information on Log4j click here

[K_montalvo]

Very nice!  another tool to have!

[XBensemhoun]

Bravo!

[_Val_]

Brilliant!

[zarkathus]

Nice!

The IPS Protection is valid only for http/80?

Regards, 

[_Val_]

Also, for HTTPS, if inspection is enabled.

[zarkathus]

Thank you for your reply. 

I can see only IPS Prevent logs on http/80, even with the HTTPS Inspection on cluster enabled. 

Regards, 

[Shay_Levin]

For ingress SSL inspection, you will need to upload the certificate( Cer + private key)  that is being used on your webserver to the cp management.

The gateway needs the private key for decryption, without that, the gateway it blind.

[_Val_]

Do you have HTTPSi inbound inspection rules for the server in question?

[HeikoAnkenbrand]

Nice tool. Thanks!

[Chris_Atkinson]

Thanks for making this available for the community! 

[MtxMan]

Hi @Shay_Levin i think scanner website is down, i cant access right now. or still on maintenance mode?

[Shay_Levin]

yes, i shut it down a few weeks ago as I saw the usage is really low, i guess Log4j is old news 🙂

There are many options available to make this test online , just google it