“This situation is relevant solely to PAN-OS 10.2, PAN-OS 11.0, and PAN-OS 11.1 firewalls with the configurations for each GlobalProtect gateway and gadget telemetry enabled,” the corporate mentioned in its advisory.
Clients can test if they’ve the GlobalProtect gateway configured beneath the Community > GlobalProtect > Gateways menu within the firewall’s internet interface. The telemetry function could be checked beneath System > Setup > Telemetry.
Mitigating Palo Alto Networks Pan-OS
The corporate plans to launch software program hotfixes for PAN-OS 10.2, PAN-OS 11.0 and PAN-OS 11.1 to deal with the flaw on April 14. These patches shall be numbered 10.2.9-h1, 11.0.4-h1 and 11.1.2-h3. Older PAN-OS releases should not impacted and neither are the Cloud NGFW or Prisma Entry and Panorama home equipment.