topic Re: Virus Scanner Flagging FTD Software package in Network Security

Virus Scanner Flagging FTD Software package

jwornstaff — Thu, 31 Oct 2024 18:09:08 GMT

Anyone else have an issue whereby a virus scanner is flagging a Cisco FTD or FCM package file? When using MS defender scan on 7.4.1 it detects exploits, now my security folks want let me move it for install. I assuming it must be related to SNORT rules and definitions being found.

Re: Virus Scanner Flagging FTD Software package

nspasov — Thu, 31 Oct 2024 21:16:42 GMT

I just tried this on my end with a Windows 10 and 11 machines. Neither one of them flagged the software. So, this could be a false-positive or a misconfiguration on the windows defender side. But, it is probably best to raise a support request with Microsoft.

Thank you for rating helpful posts!

Re: Virus Scanner Flagging FTD Software package

Aref Alsouqi — Fri, 01 Nov 2024 15:59:05 GMT

Out of curiosity what exploits IDs the scan provides?

Re: Virus Scanner Flagging FTD Software package

jwornstaff — Mon, 04 Nov 2024 17:42:20 GMT

Attached screen shot with exploits found.

Re: Virus Scanner Flagging FTD Software package

jwornstaff — Tue, 05 Nov 2024 13:46:05 GMT

I attached screenshot below.

Re: Virus Scanner Flagging FTD Software package

jwornstaff — Tue, 05 Nov 2024 13:48:56 GMT

That odd, I have window 10 and window 11 and MS defender flags on both for only the FDT upgrade package and not the FMC, I also download a 7.3.x something and it get flagged as well. I opened tac case but of course not heard anything in several days. See screen shot below.

Re: Virus Scanner Flagging FTD Software package

Aref Alsouqi — Tue, 05 Nov 2024 13:53:22 GMT

This is really odd and I've never came across this before. I would raise this with MS support as well to trying to understand if this is a false positive or not.