How to block Attack OpenSSL.TLS.Heartbeat.Information.Disclosure?

[simonleung]

The fortigate firewall detected the attack OpenSSL.TLS.Heartbeat.Information.Disclosure? How do I block it?

[abelio]

Hello

First comment: do you have yet equipment running Openssl old deprecated version 1.0.1/1.0.2?

If so, use IPS signatures in a IPS profile with action block (reset/quarantine - your choice) for the signature OpenSSL.TLS.Heartbeat.Information.Disclosure and apply it in firewall policies matching traffic

Hope it helps