- Products
- Network Security
- Threat Protection
- Secure Access Service Edge (SASE)
- Cloud Security
- Endpoint Security
- Email Security
- Secure Access
-
Wi-Fi 6 Access Points
SonicWall SonicWave 600 series access points provide always-on, always-secure connectivity for complex, multi-device environments.
Read More
- Solutions
- Industries
- Use Cases
- Solutions Widgets
- Solutions Content Widgets
Federal
Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
- Solutions Image Widgets
-
- Partners
- SonicWall Partners
- Partner Resources
- Partner Widgets
- Custom HTML : Partners Content WIdgets
Partner Portal
Access to deal registration, MDF, sales and marketing tools, training and more
- Partners Image Widgets
-
- Support
- Support
- Resources
- Capture Labs
- Support Widget
- Custom HTML : Support Content WIdgets
Support Portal
Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
- Support Image Widgets
-
- COMPANY
- PROMOTIONS
- MANAGED SERVICES
- Contact Sales
-
- Menu
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
How do I protect WAF 3.x from the Log4j vulnerability and ‘Log4Shell’ exploits?
12/16/2021 
0 People found this article helpful
156,096 Views
Description
This article outlines configuration changes required on WAF 3.x to address the Log4j vulnerability.
Resolution
Although WAF 3.x uses Log4j, it only comes into action when enabled by the ‘Cloud Management’ feature.
The ‘Cloud Management’ feature is disabled by default so customers are protected from the Log4j vulnerability.
To avoid exploitation of the Log4j vulnerability customers should disable (uncheck) the ‘Cloud Management’ feature. Disabling the ‘Cloud Management’ feature won’t affect WAF functionality as ‘Cloud Management’ is a deprecated feature.
A firmware upgrade on WAF is not required.
To disable the 'Cloud Management' feature please go to System | Administration page:
NOTE: WAF 2.2.x and earlier versions don’t use Log4j.
Related Articles
- How to force an update of the Security Services Signatures from the Firewall GUI
- Configure Guest VLAN in the TZ firewall, for guest users to access Internet only.
- How to Setup the SonicWave 600 series
YES
NO