CVE-2017-9841 not found on IPS Signature list on Checkpoint

[Bishal_Upadhyay]

Hi Everyone,

CVE-2017-9841 is not included in IPS protections list of Checkpoint. Our network is continuously detecting this one which is prevented by our core firewall Cisco Firepower, but not by Checkpoint which is deployed at perimeter.

CVSS v3.0 Severity and Metrics considers this CVE as a critical one having Base Score: 9.8

With Regards,

Bishal

[PhoneBoy]

IPS protections are developed based on the availability of technical information, severity, the popularity of the affected products, and customer requests.
This means not every CVE will have an IPS signature.

[Bishal_Upadhyay]

Thanks for the reply.

But where and how we can request to include this CVE in IPS signature list of Checkpoint?

[Omer_Shliva]

Hi,

As stated in our IPS self-help guide

Requesting New Protections
IPS protections are developed based on the availability of technical information, severity and
the popularity of the affected product, and customer requests.
To cover a specific CVE, Check Point uses reliable and comprehensive information available
internally and externally.
Every customer's request is addressed, and if possible, new protection is released and published
in the IPS package.
To request new protection, please refer to Customer Assistance and provide detailed
information.

Customer Assistance
Check Point Support has a broad range of various services. Contact Check Point Support Center
http://supportcenter.checkpoint.com and select the services that best suit your needs.