article thumbnail

These Services Shall Not Pass: Abusing Service Tags to Bypass Azure Firewall Rules (Customer Action Required)

Tenable

Azure customers whose firewall rules rely on Azure Service Tags, pay attention: You could be at risk due to a vulnerability detected by Tenable Research. Tenable Research has discovered a vulnerability in Azure that allows an attacker to bypass firewall rules based on Azure Service Tags by forging requests from trusted services.

Firewall 143
article thumbnail

CVE-2020-2021: Palo Alto Networks PAN-OS Vulnerable to Critical Authentication Bypass Vulnerability

Tenable

Critical authentication bypass vulnerability in PAN-OS devices could be exploited in certain configurations, which are commonly recommended by identity providers. PAN-OS is the custom operating system (OS) that Palo Alto Networks (PAN) uses in their next-generation firewalls. Authentication and Captive Portal. Background.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

CVE-2020-12271: Zero-Day SQL Injection Vulnerability in Sophos XG Firewall Exploited in the Wild

Tenable

Sophos pushes a hotfix to address a SQL injection vulnerability in Sophos XG Firewall that was exploited in the wild. On April 22, Sophos published a knowledge base entry on the Sophos Community regarding the discovery of a zero-day vulnerability in the Sophos XG Firewall that was exploited in the wild. Background. Proof of concept.

Firewall 102
article thumbnail

Kubernetes Security Risks and Protection Methods

The Crazy Programmer

You could also implement firewalls manually to stop unauthorized users from gaining access. Setting an authentication process for external ports will reduce vulnerabilities. For the external ports that you do need, create an authentication process for people to gain access.

article thumbnail

4 Ways to Improve Nessus Scans Through Firewalls

Tenable

Establishing the right configurations and settings can improve Nessus scan results when scanning through firewalls. Network-based firewalls are essential for an organization’s perimeter protection and internal network segregation, while host-based firewalls are common on both Linux and Windows systems. . Tuning a network scan.

article thumbnail

New CISA Hardening Guidance Provides Valuable Insights for Network Security Engineers

Tenable

Another component of segmentation is initializing a default-deny access-control list (ACL), which can be done at the firewall level. Some examples of segmentation and ACL firewall configurations can be found in CIS Benchmarks for Cisco, Juniper Networks, and Palo Alto Networks products. x Benchmark v4.2.0 - Level 1 CIS Cisco IOS XE 16.x

Network 121
article thumbnail

A Practical History of the Firewall – Part 4: The Next Generation

Firemon

The Next-Generation Firewall Market Penetration of the Next-Gen Firewall The Platform The Future of the Firewall Book a Demo Jody Brazil CEO at FireMon As hardware and software performance improved, the difference in firewall performance between the different vendors became much smaller. A very impressive track record.