Firewalls in Cuba, Iran, North Korea, Sudan, and Syria not updating
Firewalls in Cuba, Iran, North Korea, Sudan, and Syria not updating
0
Created On 09/25/18 19:21 PM - Last Modified 07/19/22 23:11 PM
Symptom
Symptoms
Firewall was purchased and registered and then moved into a country that is currently on the United States embargo list. These include: Cuba, Iran, North Korea, Sudan, and Syria
These firewalls cannot get access to the update servers and as such they cannot update. They also recieve
ICMP response of Type 3 Code 13 (administratively filtered) due to embargoed IP space.
Diagnosis
Based on the ICMP reponse and embargo list we are blocking it and for proper and legitimate reasons, and it doesn’t matter if the serial number is owned/purchased by a customer in another country, as long as it is placed in one of those countries we will need to follow the official legal procedure.
Resolution
The firewall is not supposed to be there and thus we are not supposed to be supporting the customer, the procedure is to report it to Trade@paloaltonetworks.com for further information regarding how to move forward with this case.