Application and Threat Content Release Notes - Version 698

Palo Alto Networks released this emergency content update to modify coverage for a Microsoft SMB Remote Code Execution Vulnerability for exploits seen in the wild related to the WanaCryptor ransomware attacks.

Customers are advised to upgrade all firewalls and appliances to the latest version of Content Apps and Threats and review policies to ensure desired actions are configured on all security policies.

Beginning with content release version 693-3991, content release updates extend the Panorama CA certificate that is expiring on June 16, 2017. For firewalls to continue to work with Panorama and Log Collectors after June 16, 2017, you must do one of the following:

• Update the Content running on Panorama and the Log Collectors:
1. Install content release version 693-3991 or a later content update on Panorama and all Log Collectors.
2. After updating the content, reboot Panorama and the Log Collectors to complete the certificate replacement.
• Upgrade the Panorama Software running on Panorama and the Log Collectors to a software OS version listed here:
  https://live.paloaltonetworks.com/t5/General-Topics/Panorama-Certificate-Expiration-on-June-16-2017/m-p/150948/thread-id/50050

For additional information about your options for replacing the Panorama CA, go to:
https://live.paloaltonetworks.com/t5/General-Topics/Panorama-Certificate-Expiration-on-June-16-2017/m-p/150948/thread-id/50050

Modified Vulnerability Signatures (1)