This update package improves the detection capabilities of the Forcepoint NGFW system.
| RELEASE DATE: | Thursday April 20, 2023 |
| MD5 CHECKSUM: | bae5a1a96f392f0fb65f53871b611f19 |
| SHA1 CHECKSUM: | 95dbf66a76c4c774f4b8f97b32e0a0462ad77028 |
| SHA256 CHECKSUM: | 862241eefc9bde5e1903b910873375dfde0676c0efacef9aa5a6fe40b8860c0b |
UPDATE CRITICALITY: HIGH
MINIMUM SOFTWARE VERSIONS
| - Forcepoint NGFW Security Management Center: | 6.5.1.10631 |
| - Forcepoint NGFW: | 6.3.1.19034 |
List of detected attacks in this update package:
| Risk level | Description | Reference | Vulnerability |
|---|---|---|---|
| High | Possible Vice Society data exfiltration traffic pattern was detected | No CVE/CAN | Possible-Vice-Society-PowerShell-Data-Exfiltration-Traffic |
| High | An attempt to exploit a vulnerability in Zoho Corporation ManageEngine ADManager Plus detected | CVE-2023-29084 | Zoho-Corporation-Manageengine-Admanager-Plus-Command-Injection-CVE-2023-29084 |
| High | An attempt to exploit a vulnerability in Adobe ColdFusion detected | CVE-2023-26360 | Adobe-ColdFusion-Deserialization-Of-Untrusted-Data-Vulnerability-CVE-2023-26360 |
| High | An attempt to exploit a vulnerability in Microsoft Message Queuing detected | CVE-2023-21554 | Microsoft-Message-Queuing-Remote-Code-Execution-Vulnerability-CVE-2023-21554 |
| High | An attempt to exploit a vulnerability in Contec CONPROSYS HMI System (CHS) detected | CVE-2023-1658 | Contec-Conprosys-HMI-System-Cpostgresql.php-SQL-Injection |
| High | An attempt to exploit a vulnerability in Netgate pfSense detected | CVE-2023-27253 | Netgate-Pfsense-Restore_rrddata-Command-Injection |
Jump to: Detected Attacks Other Changes
DETECTED ATTACKS
New detected attacks:
TCP Client Stream Unknown
| Risk | Vulnerability/Situation | References | Related Fingerprint | Situation Type |
|---|---|---|---|---|
| High | Microsoft-Message-Queuing-Remote-Code-Execution-Vulnerability-CVE-2023-21554 | CVE-2023-21554 | Generic_CS-Microsoft-Message-Queuing-Remote-Code-Execution-Vulnerability-CVE-2023-21554 | Potential Compromise |
HTTP Request URI
HTTP Request Header Line
| Risk | Vulnerability/Situation | References | Related Fingerprint | Situation Type |
|---|---|---|---|---|
| High | Contec-Conprosys-HMI-System-Cpostgresql.php-SQL-Injection | CVE-2023-1658 | HTTP_CSH-Contec-Conprosys-HMI-System-Cpostgresql.php-SQL-Injection | Suspected Compromise |
HTTP Normalized Request-Line
| Risk | Vulnerability/Situation | References | Related Fingerprint | Situation Type |
|---|---|---|---|---|
| High | Zoho-Corporation-Manageengine-Admanager-Plus-Command-Injection-CVE-2023-29084 | CVE-2023-29084 | HTTP_CRL-Zoho-Corporation-Manageengine-Admanager-Plus-Command-Injection-CVE-2023-29084 | Suspected Compromise |
| High | Adobe-ColdFusion-Deserialization-Of-Untrusted-Data-Vulnerability-CVE-2023-26360 | CVE-2023-26360 | HTTP_CRL-Adobe-ColdFusion-Deserialization-Of-Untrusted-Data-Vulnerability-CVE-2023-26360 | Suspected Compromise |
Identified Text File Stream
| Risk | Vulnerability/Situation | References | Related Fingerprint | Situation Type |
|---|---|---|---|---|
| High | Netgate-Pfsense-Restore_rrddata-Command-Injection | CVE-2023-27253 | File-TextId_Netgate-Pfsense-Restore_rrddata-Command-Injection | Suspected Compromise |
Updated detected attacks:
TCP SMB Client Stream
| Risk | Vulnerability/Situation | References | Related Fingerprint | Situation Type | Change Description | |||
|---|---|---|---|---|---|---|---|---|
| High | Microsoft_Windows_SMBv3_Remote_Code_Execution_Vulnerability_CVE-2020-0796 | CVE-2020-0796 | SMB-TCP_Microsoft_Windows_SMBv3_Remote_Code_Execution_Vulnerability_CVE-2020-0796 | Potential Compromise |
|
LIST OF OTHER CHANGES:
New objects:
| Type | Name |
|---|---|
| Certificate Authority | Actalis Domain Validation Server CA G3 |
| Certificate Authority | Actalis Extended Validation Server CA G3 |
| Certificate Authority | Actalis Organization Validated Server CA G3 |
| Certificate Authority | Amazon RSA 2048 M01 |
| Certificate Authority | Amazon RSA 2048 M02 |
| Certificate Authority | Amazon ECDSA 256 M01 |
| Certificate Authority | Amazon ECDSA 256 M02 |
| Certificate Authority | Amazon ECDSA 384 M01 |
| Certificate Authority | Amazon ECDSA 384 M02 |
| Certificate Authority | Amazon Root CA 3 (1) |
| Certificate Authority | Amazon Root CA 4 (1) |
| Certificate Authority | Certum Trusted Network CA (1) |
| Certificate Authority | Abitab SSL Domain Validated |
| Certificate Authority | Abitab SSL Organization Validated |
| Certificate Authority | GDCA TrustAUTH R4 DV SSL CA G2 |
| Certificate Authority | GDCA TrustAUTH R4 OV SSL CA G2 |
| Certificate Authority | nazwaSSL |
| Certificate Authority | OKCERT R4 OV SSL CA G2 |
| Certificate Authority | Shoper® SSL |
| Certificate Authority | Shuidi Webtrust SSL Organization Validated |
| Certificate Authority | SpaceSSL CA |
| Certificate Authority | SZCA OV SSL CA |
| Certificate Authority | United Trust |
| Certificate Authority | vTrus DV SSL CA G1 |
| Certificate Authority | vTrus OV SSL CA G1 |
| Certificate Authority | www.lh.pl |
| Certificate Authority | XinChaCha Trust SSL Domain Validated |
| Certificate Authority | XinChaCha Trust SSL Extended Validated |
| Certificate Authority | XinChaCha Trust SSL Organization Validated |
| Certificate Authority | Certum Extended Validation CA SHA2 |
| Certificate Authority | Certum Organization Validation CA SHA2 |
| Certificate Authority | Root CA - G3 |
| Certificate Authority | SSL.com EV Root Certification Authority RSA R2 (1) |
| Certificate Authority | SSL.com Root Certification Authority RSA (1) |
| Certificate Authority | UCA Global G2 Root (1) |
| Certificate Authority | WoSign OV SSL CA |
| Certificate Authority | WoTrus DV SSL CA |
| Certificate Authority | WoTrus OV SSL CA |
| Certificate Authority | Xcc Trust DV SSL CA |
| Certificate Authority | Xcc Trust OV SSL CA |
| Certificate Authority | Atos TrustedRoot Server-CA 2019 |
| Certificate Authority | AC Firmaprofesional - Secure Web 2021 |
| Certificate Authority | AC Firmaprofesional - Secure Web 2022 |
| Certificate Authority | Buypass Class 2 CA 2 |
| Certificate Authority | Buypass Class 2 CA 5 |
| Certificate Authority | Buypass Class 3 CA 2 |
| Certificate Authority | Certigna Services CA |
| Certificate Authority | Certigna Wild CA |
| Certificate Authority | Certigna Services CA (1) |
| Certificate Authority | certSIGN Enterprise CA Class 3 G2 |
| Certificate Authority | CFCA EV OCA |
| Certificate Authority | CFCA OV OCA |
| Certificate Authority | ePKI Root Certification Authority - G2 int |
| Certificate Authority | ePKI Root Certification Authority int |
| Certificate Authority | Chunghwa Telecom Co., Ltd. - Public Certification Authority - G2 |
| Certificate Authority | Chunghwa Telecom Co., Ltd. - Public Certification Authority - G2 (1) |
| Certificate Authority | ePKI Root Certification Authority - G2 (1) int |
| Certificate Authority | D-TRUST SSL Class 3 CA 1 2009 |
| Certificate Authority | D-TRUST CA 2-2 EV 2016 |
| Certificate Authority | D-TRUST SSL Class 3 CA 1 EV 2009 |
| Certificate Authority | Deutscher Bundestag CA - G02 |
| Certificate Authority | DFN-Verein Global Issuing CA |
| Certificate Authority | Fraunhofer Service CA - G02 |
| Certificate Authority | MPG CA - G02 |
| Certificate Authority | TU Ilmenau CA G2 |
| Certificate Authority | DFN-Verein Certification Authority 2 |
| Certificate Authority | Telekom Security ServerID OV Class 2 CA |
| Certificate Authority | TeleSec Business TLS-CA 2022 |
| Certificate Authority | TeleSec Business TLS-CA 21 |
| Certificate Authority | TeleSec ServerPass Class 2 CA |
| Certificate Authority | Telekom Security ServerID EV Class 3 CA |
| Certificate Authority | TeleSec ServerPass Extended Validation Class 3 CA |
| Certificate Authority | Cloudflare Inc ECC CA-3 |
| Certificate Authority | Cloudflare Inc RSA CA-2 |
| Certificate Authority | Cybertrust Global Root (1) |
| Certificate Authority | DigiCert Baltimore CA-2 G2 |
| Certificate Authority | DigiCert Baltimore TLS RSA SHA256 2020 CA1 |
| Certificate Authority | DigiCert Global Root CA (1) |
| Certificate Authority | DigiCert High Assurance EV Root CA (1) |
| Certificate Authority | Microsoft RSA TLS CA 01 |
| Certificate Authority | Microsoft RSA TLS CA 02 |
| Certificate Authority | Trust Technologies Global CA |
| Certificate Authority | TERENA SSL CA 3 |
| Certificate Authority | DigiCert Assured ID CA G2 |
| Certificate Authority | DigiCert Basic RSA CN CA G2 |
| Certificate Authority | DigiCert Cloud Services CA-1 |
| Certificate Authority | DigiCert Cloud Services CA-1 (1) |
| Certificate Authority | DigiCert CN RSA CA G1 |
| Certificate Authority | DigiCert Secure Site CN CA G3 |
| Certificate Authority | DigiCert Secure Site Pro CN CA G3 |
| Certificate Authority | DigiCert Secure Site Pro ECC CN CA G3 |
| Certificate Authority | DigiCert TLS Hybrid ECC SHA384 2020 CA1 |
| Certificate Authority | DigiCert TLS Hybrid ECC SHA384 2020 CA1 (1) |
| Certificate Authority | DigiCert TLS RSA SHA256 2020 CA1 |
| Certificate Authority | DigiCert TLS RSA SHA256 2020 CA1 (1) |
| Certificate Authority | DigiCert TLS RSA4096 Root G5 (1) |
| Certificate Authority | GeoTrust CN RSA CA G1 |
| Certificate Authority | GeoTrust ECC CA 2018 |
| Certificate Authority | GeoTrust ECC CN CA G2 |
| Certificate Authority | GeoTrust Global TLS RSA4096 SHA256 2022 CA1 |
| Certificate Authority | GeoTrust RSA CN CA G2 |
| Certificate Authority | GeoTrust RSA CN CA G3 |
| Certificate Authority | RapidSSL ECC CA 2018 |
| Certificate Authority | RapidSSL Global TLS RSA4096 SHA256 2022 CA1 |
| Certificate Authority | RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1 |
| Certificate Authority | Secure Site CA |
| Certificate Authority | Secure Site CA G2 |
| Certificate Authority | Secure Site Pro CA G2 |
| Certificate Authority | Thawte ECC CA 2018 |
| Certificate Authority | TrustAsia OV TLS Pro CA G2 |
| Certificate Authority | TrustAsia OV TLS Pro CA G3 |
| Certificate Authority | TrustAsia TLS ECC CA |
| Certificate Authority | DigiCert EV RSA CA G2 |
| Certificate Authority | DigiCert Global CA G2 |
| Certificate Authority | DigiCert Global G2 TLS RSA SHA256 2020 CA1 |
| Certificate Authority | DigiCert Global G2 TLS RSA SHA256 2020 CA1 (1) |
| Certificate Authority | GeoTrust EV RSA CA G2 |
| Certificate Authority | Microsoft Azure TLS Issuing CA 01 |
| Certificate Authority | Microsoft Azure TLS Issuing CA 02 |
| Certificate Authority | Microsoft Azure TLS Issuing CA 05 |
| Certificate Authority | Microsoft Azure TLS Issuing CA 06 |
| Certificate Authority | Thawte EV RSA CA G2 |
| Certificate Authority | Trust Provider B.V. TLS RSA CA G1 |
| Certificate Authority | Trust Provider B.V. TLS RSA EV CA G2 |
| Certificate Authority | Wells Fargo Public Trust Certification Authority 01 G2 |
| Certificate Authority | Apple Public EV Server ECC CA 1 - G1 |
| Certificate Authority | DigiCert Global G3 TLS ECC SHA384 2020 CA1 |
| Certificate Authority | DigiCert Global G3 TLS ECC SHA384 2020 CA1 (1) |
| Certificate Authority | DigiCert Global G3 TLS ECC SHA384 2020 CA1 (2) |
| Certificate Authority | Encryption Everywhere G3 TLS ECC P384 SHA384 2023 CA1 |
| Certificate Authority | GeoTrust TLS ECC CA G1 |
| Certificate Authority | RapidSSL TLS ECC CA G1 |
| Certificate Authority | Thawte TLS ECC CA G1 |
| Certificate Authority | Aetna Inc. Secure CA2 |
| Certificate Authority | Apple Public EV Server RSA CA 2 - G1 |
| Certificate Authority | DigiCert Basic EV RSA CN CA G2 |
| Certificate Authority | DigiCert ECC Extended Validation Server CA |
| Certificate Authority | DigiCert Secure Site Pro EV CN CA G3 |
| Certificate Authority | GeoTrust EV ECC CA 2018 |
| Certificate Authority | Secure Site Extended Validation CA G2 |
| Certificate Authority | Secure Site Pro Extended Validation CA G2 |
| Certificate Authority | Thawte EV ECC CA 2018 |
| Certificate Authority | Thawte EV RSA CA 2018 |
| Certificate Authority | TrustAsia EV TLS Pro CA G3 |
| Certificate Authority | WoTrus OV SSL Pro CA |
| Certificate Authority | GeoTrust G5 TLS RSA4096 SHA384 2022 CA1 |
| Certificate Authority | DKB CA 1O1 |
| Certificate Authority | CA Disig R2I2 Certification Service |
| Certificate Authority | emSign SSL CA - G1 |
| Certificate Authority | AffirmTrust Certificate Authority - OV1 |
| Certificate Authority | AffirmTrust Extended Validation CA - EV1 |
| Certificate Authority | Entrust Certification Authority - L1M |
| Certificate Authority | Entrust Certification Authority - L1F |
| Certificate Authority | Entrust Certification Authority - L1J |
| Certificate Authority | Entrust Certification Authority - L1K |
| Certificate Authority | Entrust Certification Authority - L1K (1) |
| Certificate Authority | Entrust Certification Authority - L1K (2) |
| Certificate Authority | GDCA TrustAUTH R4 EV SSL CA |
| Certificate Authority | GDCA TrustAUTH R4 OV SSL CA |
| Certificate Authority | CUISEC GCC R3 TLS DV CA 2021 |
| Certificate Authority | DPDHL Global TLS CA - I5 |
| Certificate Authority | GlobalSign |
| Certificate Authority | GlobalSign Atlas R3 AlphaSSL CA 2022 Q1 |
| Certificate Authority | GlobalSign Atlas R3 AlphaSSL CA 2022 Q3 |
| Certificate Authority | GlobalSign Atlas R3 AlphaSSL CA 2023 Q1 |
| Certificate Authority | GlobalSign Atlas R3 DV TLS CA 2022 Q2 |
| Certificate Authority | GlobalSign Atlas R3 DV TLS CA 2022 Q3 |
| Certificate Authority | GlobalSign Atlas R3 DV TLS CA 2022 Q4 |
| Certificate Authority | GlobalSign Atlas R3 DV TLS CA 2023 Q1 |
| Certificate Authority | GlobalSign Atlas R3 DV TLS CA H2 2021 |
| Certificate Authority | GlobalSign Atlas R3 OV TLS CA 2022 Q3 |
| Certificate Authority | GlobalSign Atlas R3 OV TLS CA 2022 Q4 |
| Certificate Authority | GlobalSign Atlas R3 OV TLS CA 2023 Q1 |
| Certificate Authority | GlobalSign ECC CloudSSL CA - SHA384 - G3 |
| Certificate Authority | GlobalSign ECC EV SSL CA 2018 |
| Certificate Authority | GlobalSign ECC OV SSL CA 2018 |
| Certificate Authority | GlobalSign GCC R3 EV QWAC CA 2020 |
| Certificate Authority | GlobalSign RSA OV SSL CA 2018 |
| Certificate Authority | Hongkong Post Root CA 3 (1) |
| Certificate Authority | Trusted Root TLS CA SHA256 G3 |
| Certificate Authority | AlphaSSL CA - SHA256 - G2 |
| Certificate Authority | AlphaSSL CA - SHA256 - G4 |
| Certificate Authority | GlobalSign ECC Root CA - R5 (1) |
| Certificate Authority | GlobalSign Root CA - R3 (1) |
| Certificate Authority | GlobalSign Domain Validation CA - SHA256 - G3 |
| Certificate Authority | GlobalSign Organization Validation CA - SHA256 - G3 |
| Certificate Authority | GTS Root R1 (1) |
| Certificate Authority | RNP ICPEdu OV SSL CA 2019 |
| Certificate Authority | Soluti CA - OV |
| Certificate Authority | Valid Certificadora Digital AlphaSSL CA 2018 |
| Certificate Authority | Valid Certificadora Digital SSL OV CA 2018 |
| Certificate Authority | Go Daddy Secure Certification Authority |
| Certificate Authority | Starfield Secure Certification Authority |
| Certificate Authority | Certainly Intermediate R1 |
| Certificate Authority | GTS CA 1C3 |
| Certificate Authority | GTS CA 1D4 |
| Certificate Authority | GTS CA 1P5 |
| Certificate Authority | Hongkong Post e-Cert EV SSL CA 3 - 17 |
| Certificate Authority | Hongkong Post e-Cert SSL CA 3 - 17 |
| Certificate Authority | ACCVCA-120 |
| Certificate Authority | AC SERVIDORES SEGUROS TIPO2 |
| Certificate Authority | AC Componentes Informáticos- |
| Certificate Authority | TUBITAK Kamu SM SSL Sertifika Hizmet Saglayicisi - Surum 1 |
| Certificate Authority | HARICA DV TLS ECC |
| Certificate Authority | HARICA DV TLS RSA |
| Certificate Authority | HARICA SSL ECC SubCA R2 |
| Certificate Authority | HARICA TLS ECC Root CA 2021 (1) |
| Certificate Authority | HARICA Institutional TLS RSA |
| Certificate Authority | HARICA SSL RSA SubCA R3 |
| Certificate Authority | HARICA TLS RSA Root CA 2021 (1) |
| Certificate Authority | HydrantID Server CA O1 |
| Certificate Authority | TrustID Server CA E1 |
| Certificate Authority | TrustID Server CA O1 |
| Certificate Authority | ISRG Root X2 (1) |
| Certificate Authority | Let's Encrypt R3 |
| Certificate Authority | Let's Encrypt R4 |
| Certificate Authority | Let's Encryp E1 |
| Certificate Authority | CA de Certificados SSL EV |
| Certificate Authority | EAEko Herri Administrazioen CA - CA AAPP Vascas (2) |
| Certificate Authority | e-Szigno SSL CA 2014 |
| Certificate Authority | Qualified e-Szigno TLS CA 2018 |
| Certificate Authority | NETLOCK DVSSL CA |
| Certificate Authority | NetLock Expressz (Class C) Tanúsítványkiadó |
| Certificate Authority | NetLock Közjegyzői (Class A) Tanúsítványkiadó |
| Certificate Authority | NETLOCK Trust Qualified EV CA 3 |
| Certificate Authority | NetLock Üzleti (Class B) Tanúsítványkiadó |
| Certificate Authority | TuringSign RSA Secure CA |
| Certificate Authority | WISeKey CertifyID SSL GB CA 2 |
| Certificate Authority | HydrantID SSL CA G3 |
| Certificate Authority | QuoVadis Global SSL ICA G2 |
| Certificate Authority | QuoVadis Global SSL ICA G2 (1) |
| Certificate Authority | DigiCert QV TLS ICA G1 |
| Certificate Authority | QuoVadis Europe EV SSL CA G1 |
| Certificate Authority | QuoVadis Europe SSL CA G2 |
| Certificate Authority | QuoVadis Global SSL ICA G3 |
| Certificate Authority | QuoVadis Qualified Web ICA G2 |
| Certificate Authority | Security Communication RootCA2_2015-20230929- |
| Certificate Authority | CrossTrust OV CA5 |
| Certificate Authority | Cybertrust Japan SureServer CA G4 |
| Certificate Authority | Cybertrust Japan SureServer EV CA G3 |
| Certificate Authority | FujiSSL Public Validation Authority - G3 |
| Certificate Authority | JPRS Domain Validation Authority - G4 |
| Certificate Authority | JPRS Organization Validation Authority - G4 |
| Certificate Authority | NII Open Domain CA - G7 RSA |
| Certificate Authority | SECOM Passport for Web EV 2.0 CA |
| Certificate Authority | SECOM Passport for Web SR 3.0 CA |
| Certificate Authority | Apple Public Server ECC CA 12 - G1 |
| Certificate Authority | Apple Public Server RSA CA 12 - G1 |
| Certificate Authority | COMODO ECC Certification Authority (1) |
| Certificate Authority | COMODO RSA Certification Authority (1) |
| Certificate Authority | Sectigo RSA Pro Series Secure Server CA |
| Certificate Authority | TrustAsia ECC DV TLS CA G2 |
| Certificate Authority | TrustAsia ECC OV TLS CA G2 |
| Certificate Authority | TrustAsia RSA DV TLS CA G2 |
| Certificate Authority | TrustAsia RSA OV TLS CA G2 |
| Certificate Authority | USERTrust ECC Certification Authority (1) |
| Certificate Authority | USERTrust RSA Certification Authority (1) |
| Certificate Authority | Sectigo SHA-256 EV Secure Server CA 2 |
| Certificate Authority | COMODO ECC Organization Validation Secure Server CA |
| Certificate Authority | cPanel, Inc. ECC Certification Authority |
| Certificate Authority | cPanel High Assurance RSA Certification Authority |
| Certificate Authority | InCommon IGTF Server CA |
| Certificate Authority | SSL Blindado EV 2 |
| Certificate Authority | Trustico RSA DV CA |
| Certificate Authority | Trustico RSA EV CA |
| Certificate Authority | UbiquiTLS™ DV RSA Server CA |
| Certificate Authority | AlpiroSSL ECC DV CA |
| Certificate Authority | GEANT OV ECC CA 4 |
| Certificate Authority | GoGetSSL ECC DV CA |
| Certificate Authority | InCommon ECC Server CA |
| Certificate Authority | Sectigo ECC Domain Validation Secure Server CA |
| Certificate Authority | Sectigo ECC Extended Validation Secure Server CA |
| Certificate Authority | Sectigo ECC Organization Validation Secure Server CA |
| Certificate Authority | TrustAsia ECC EV TLS CA G3 |
| Certificate Authority | USERTrust ECC Organization Validation Secure Server CA |
| Certificate Authority | ZeroSSL ECC Domain Secure Site CA |
| Certificate Authority | AlpiroSSL RSA DV CA |
| Certificate Authority | Baidu, Inc. DV CA |
| Certificate Authority | Baidu, Inc. OV CA |
| Certificate Authority | CerSign DV SSL CA |
| Certificate Authority | CerSign OV SSL CA |
| Certificate Authority | CertCloud RSA TLS CA |
| Certificate Authority | CERTDATA SSL OV CA |
| Certificate Authority | Certera DV SSL CA |
| Certificate Authority | cnTrus DV SSL CA |
| Certificate Authority | cnTrus OV SSL CA |
| Certificate Authority | cnWebTrust OV CA |
| Certificate Authority | Digi-Sign CA Digi-SSL |
| Certificate Authority | DNEncrypt SHA2 DV SSL/TLS [Run by the Issuer] |
| Certificate Authority | DNSPod RSA DV |
| Certificate Authority | DNSPod RSA OV |
| Certificate Authority | DOMENY SSL DV Certification Authority |
| Certificate Authority | DOMENY SSL OV Certification Authority |
| Certificate Authority | Don Dominio / MrDomain RSA DV CA |
| Certificate Authority | eMudhra RSA Domain Validation Secure Server CA |
| Certificate Authority | eMudhra RSA Organization Validation Secure Server CA |
| Certificate Authority | EuropeanSSL High Assurance Server CA 2 |
| Certificate Authority | EuropeanSSL Server CA 2 |
| Certificate Authority | FujiSSL SHA2 Business Secure Site CA |
| Certificate Authority | FujiSSL SHA2 Domain Secure Site CA |
| Certificate Authority | FujiSSL SHA2 Extended Validation Secure Site CA |
| Certificate Authority | Gandi Pro SSL CA 2 |
| Certificate Authority | GEANT eScience SSL CA 4 |
| Certificate Authority | GEANT EV RSA CA 4 |
| Certificate Authority | GEANT OV RSA CA 4 |
| Certificate Authority | Gehirn Managed Certification Authority - RSA DV |
| Certificate Authority | GlobeSSL DV CA |
| Certificate Authority | GlobeSSL DV Certification Authority 2 |
| Certificate Authority | GlobeSSL EV CA |
| Certificate Authority | GoGetSSL RSA DV CA |
| Certificate Authority | GoGetSSL RSA OV CA |
| Certificate Authority | InCommon RSA Server CA |
| Certificate Authority | InCommon RSA Server CA (1) |
| Certificate Authority | InCommon RSA Server CA 2 |
| Certificate Authority | JoySSL Domain Secure Server CA |
| Certificate Authority | K Software Certificate Authority (DV) 2 |
| Certificate Authority | MarketWare - Soluções para Mercados Digitais, Lda. RSA DV CA |
| Certificate Authority | MarketWare - Soluções para Mercados Digitais, Lda. RSA EV CA |
| Certificate Authority | MarketWare Server CA 2 |
| Certificate Authority | McAfee OV SSL CA 2 |
| Certificate Authority | Network Solutions DV Server CA 2 |
| Certificate Authority | Network Solutions EV Server CA 3 |
| Certificate Authority | Network Solutions OV Server CA 2 |
| Certificate Authority | OneSignSSL RSA DV Secure Server CA |
| Certificate Authority | RU-CENTER High Assurance Services CA 2 |
| Certificate Authority | Sectigo RSA Extended Validation Secure Server CA |
| Certificate Authority | SecureCore RSA DV CA |
| Certificate Authority | SecureCore RSA OV CA |
| Certificate Authority | SSL Blindado 2 |
| Certificate Authority | SSL.com DV CA |
| Certificate Authority | sslTrus (RSA) DV CA |
| Certificate Authority | sslTrus (RSA) OV CA |
| Certificate Authority | TBS X509 CA business 2 |
| Certificate Authority | TBS X509 CA pro hosting 2 |
| Certificate Authority | TI Trust Technologies OV CA |
| Certificate Authority | TrustAsia RSA DV SSL Server CA |
| Certificate Authority | TrustAsia RSA DV TLS CA G3 |
| Certificate Authority | TrustAsia RSA OV TLS CA G3 |
| Certificate Authority | Trusted Secure Certificate Authority 5 |
| Certificate Authority | Trusted Secure Certificate Authority DV |
| Certificate Authority | TrustSign BR Certification Authority (DV) 2 |
| Certificate Authority | TrustSign RSA DV CA |
| Certificate Authority | TrustSign RSA OV CA |
| Certificate Authority | USERTrust RSA Domain Validation Secure Server CA |
| Certificate Authority | USERTrust RSA Organization Validation Secure Server CA |
| Certificate Authority | WoTrus DV Server CA [Run by the Issuer] |
| Certificate Authority | WoTrus EV Server CA [Run by the Issuer] |
| Certificate Authority | WoTrus OV Server CA [Run by the Issuer] |
| Certificate Authority | XinChaCha Trust OV CA |
| Certificate Authority | XinNet RSA DV |
| Certificate Authority | XinNet RSA OV |
| Certificate Authority | ZeroSSL RSA Domain Secure Site CA |
| Certificate Authority | SHECA OV Server CA G5 |
| Certificate Authority | E-Tugra TLS RSA SubCA R1 |
| Certificate Authority | TrustSafe TLS RSA SubCA R1 |
| Certificate Authority | SSL.com EV SSL Intermediate CA ECC R2 |
| Certificate Authority | SSL.com EV Root Certification Authority ECC (1) |
| Certificate Authority | SSL.com EV SSL Intermediate CA RSA R3 |
| Certificate Authority | SSL.com SSL Intermediate CA ECC R2 |
| Certificate Authority | E-Tugra TLS RSA CA R1 |
| Certificate Authority | Quantum Secure Site DV TLS CN RSA R1 |
| Certificate Authority | SSL.com RSA SSL subCA |
| Certificate Authority | SSL.com SSL Enterprise Intermediate CA RSA R1 |
| Certificate Authority | Domain The Net Technologies Ltd CA for SSL R2 |
| Certificate Authority | SwissNS TLS Issuing RSA CA R1 |
| Certificate Authority | SwissSign RSA TLS Root CA 2021 - 1 (Cross)-SwissSign RSA TLS Root CA 2021 - 1 |
| Certificate Authority | SwissSign RSA TLS Root CA 2022 - 1 (Cross)-SwissSign RSA TLS Root CA 2022 - 1 |
| Certificate Authority | SwissSign RSA TLS DV ICA 2021 - 1 |
| Certificate Authority | SwissSign RSA TLS EV ICA 2021 - 1 |
| Certificate Authority | SwissSign RSA TLS OV ICA 2021 - 1 |
| Certificate Authority | SwissSign RSA TLS EV ICA 2022 - 1 |
| Certificate Authority | TWCA Global EVSSL Certification Authority |
| Certificate Authority | TWCA Secure SSL Certification Authority |
| Certificate Authority | TWCA Global Root CA (1) |
| Certificate Authority | Telia Domain Validation CA v3 |
| Certificate Authority | Telia Server CA v3 |
| Certificate Authority | Telia Domain Validation CA v2 |
| Certificate Authority | Telia Root CA v2 (1) |
| Certificate Authority | TeliaSonera Server CA v2 |
| Certificate Authority | Trustwave Domain Validation SHA256 CA, Level 1 |
| Certificate Authority | Trustwave Extended Validation SHA256 CA, Level 1 |
| Certificate Authority | Trustwave Organization Validation SHA256 CA, Level 1 |
| Certificate Authority | Trustwave Organization Validation SHA256 CA, Level 1 (1) |
Updated objects:
| Type | Name | Changes |
|---|---|---|
| IPList | Iraq | |
| IPList | Saudi Arabia | |
| IPList | Iran | |
| IPList | Cyprus | |
| IPList | Tanzania | |
| IPList | Syria | |
| IPList | Armenia | |
| IPList | Kenya | |
| IPList | DR Congo | |
| IPList | Central African Republic | |
| IPList | Seychelles | |
| IPList | Jordan | |
| IPList | Lebanon | |
| IPList | Kuwait | |
| IPList | Oman | |
| IPList | Qatar | |
| IPList | Bahrain | |
| IPList | United Arab Emirates | |
| IPList | Israel | |
| IPList | Turkey | |
| IPList | Ethiopia | |
| IPList | Egypt | |
| IPList | Greece | |
| IPList | Estonia | |
| IPList | Latvia | |
| IPList | Azerbaijan | |
| IPList | Lithuania | |
| IPList | Moldova | |
| IPList | Belarus | |
| IPList | Finland | |
| IPList | Åland Islands | |
| IPList | Ukraine | |
| IPList | North Macedonia | |
| IPList | Hungary | |
| IPList | Bulgaria | |
| IPList | Poland | |
| IPList | Romania | |
| IPList | Zambia | |
| IPList | Comoros | |
| IPList | Mauritius | |
| IPList | South Africa | |
| IPList | Afghanistan | |
| IPList | Pakistan | |
| IPList | Bangladesh | |
| IPList | India | |
| IPList | Maldives | |
| IPList | Uzbekistan | |
| IPList | Kazakhstan | |
| IPList | Kyrgyzstan | |
| IPList | French Southern Territories | |
| IPList | Cocos (Keeling) Islands | |
| IPList | Vietnam | |
| IPList | Thailand | |
| IPList | Indonesia | |
| IPList | Taiwan | |
| IPList | Philippines | |
| IPList | Malaysia | |
| IPList | China | |
| IPList | Hong Kong | |
| IPList | Brunei | |
| IPList | Macao | |
| IPList | South Korea | |
| IPList | Japan | |
| IPList | Singapore | |
| IPList | Russia | |
| IPList | Mongolia | |
| IPList | Australia | |
| IPList | Christmas Island | |
| IPList | Papua New Guinea | |
| IPList | New Zealand | |
| IPList | Cameroon | |
| IPList | Portugal | |
| IPList | Equatorial Guinea | |
| IPList | Nigeria | |
| IPList | São Tomé and Príncipe | |
| IPList | Gibraltar | |
| IPList | Chad | |
| IPList | Mali | |
| IPList | Tunisia | |
| IPList | Spain | |
| IPList | Malta | |
| IPList | Algeria | |
| IPList | Denmark | |
| IPList | Iceland | |
| IPList | United Kingdom | |
| IPList | Switzerland | |
| IPList | Sweden | |
| IPList | Netherlands | |
| IPList | Austria | |
| IPList | Belgium | |
| IPList | Germany | |
| IPList | Luxembourg | |
| IPList | Ireland | |
| IPList | Monaco | |
| IPList | France | |
| IPList | Andorra | |
| IPList | Liechtenstein | |
| IPList | Guernsey | |
| IPList | Slovakia | |
| IPList | Czechia | |
| IPList | Norway | |
| IPList | Italy | |
| IPList | Slovenia | |
| IPList | Montenegro | |
| IPList | Croatia | |
| IPList | Bosnia and Herzegovina | |
| IPList | Angola | |
| IPList | Bouvet Island | |
| IPList | Barbados | |
| IPList | French Guiana | |
| IPList | Saint Pierre and Miquelon | |
| IPList | Greenland | |
| IPList | Paraguay | |
| IPList | Uruguay | |
| IPList | Brazil | |
| IPList | Dominican Republic | |
| IPList | Cuba | |
| IPList | Martinique | |
| IPList | Bahamas | |
| IPList | Bermuda | |
| IPList | Antigua and Barbuda | |
| IPList | Saint Lucia | |
| IPList | Turks and Caicos Islands | |
| IPList | Aruba | |
| IPList | St Vincent and Grenadines | |
| IPList | Saint Martin | |
| IPList | Guadeloupe | |
| IPList | Grenada | |
| IPList | Cayman Islands | |
| IPList | Belize | |
| IPList | El Salvador | |
| IPList | Guatemala | |
| IPList | Honduras | |
| IPList | Nicaragua | |
| IPList | Costa Rica | |
| IPList | Venezuela | |
| IPList | Ecuador | |
| IPList | Colombia | |
| IPList | Panama | |
| IPList | Argentina | |
| IPList | Chile | |
| IPList | Bolivia | |
| IPList | Peru | |
| IPList | Mexico | |
| IPList | French Polynesia | |
| IPList | Samoa | |
| IPList | Guam | |
| IPList | Puerto Rico | |
| IPList | U.S. Virgin Islands | |
| IPList | Canada | |
| IPList | United States | |
| IPList | Palestine | |
| IPList | Serbia | |
| IPList | Antarctica | |
| IPList | South Sudan | |
| IPList | TOR exit nodes IP Address List | |
| IPList | TOR relay nodes IP Address List | |
| IPList | Malicious Site IP Address List | |
| Situation | HTTP_CSU-Shared-Variables |
HOW TO IMPORT AND ACTIVATE THE DYNAMIC UPDATE PACKAGE
- Download the dynamic update package, then make sure that the checksums for the original files and the files that you have downloaded match.
- In the Management Client, select Menu > File > Import > Import Update Packages.
- Browse to the file, select it, then click Import.
- Select Configuration, then browse to Administration > Other Elements > Updates.
- Right-click the imported dynamic update package, then select Activate.
- When the activation is finished, refresh the policy on all NGFW Engines. If your policy uses a custom template, you might need to edit the policy.
DISCLAIMER AND COPYRIGHT
Copyright © 2023 Forcepoint
Forcepoint and the FORCEPOINT logo are trademarks of Forcepoint.
All other trademarks used in this document are the property of their respective owners.
Every effort has been made to ensure the accuracy of this document. However, Forcepoint makes no warranties with respect to this documentation and disclaims any implied warranties of merchantability and fitness for a particular purpose. Forcepoint shall not be liable for any error or for incidental or consequential damages in connection with the furnishing, performance, or use of this manual or the examples herein. The information in this documentation is subject to change without notice.
Forcepoint and the FORCEPOINT logo are trademarks of Forcepoint.
All other trademarks used in this document are the property of their respective owners.
Every effort has been made to ensure the accuracy of this document. However, Forcepoint makes no warranties with respect to this documentation and disclaims any implied warranties of merchantability and fitness for a particular purpose. Forcepoint shall not be liable for any error or for incidental or consequential damages in connection with the furnishing, performance, or use of this manual or the examples herein. The information in this documentation is subject to change without notice.