The following products are vulnerable:

ProxyClient
All versions of ProxyClient prior to 3.3.3.3 and 3.4.4.10 are vulnerable.

Unified Agent
All versions of Unified Agent prior to 4.1.3.151952 are vulnerable when connecting to the Client Manager on ProxySG.  Unified Agent connecting to ThreatPulse is not vulnerable.

CVE-2015-1454

ProxyClient and Unified Agent connect to a Client Manager that resides on the ProxySG.  The connection to the Client Manager is used to download new configuration and software updates to the client.  The connection is secured using TLS/SSL and can be established over a corporate network or over a public network. 

A flaw in the validation of the of the Client Manager certificate performed by the ProxyClient and the Unified agent could allow an attacker to pose as the Client Manager.  An attacker could use this vulnerability to modify the configuration parameters of ProxyClient and Unified Agent, to deliver malicious web content to ProxyClient and Unified Agent, and to deliver malicious software updates to ProxyClient.  An attacker potentially could use this flaw to gain full administrative acces to the client.

The Unified Agent is vulnerable only when connecting to the Client Manager on ProxySG.  Unified Agent is not vulnerable when connecting to ThreatPulse.  Connections from the Unified Agent to ThreatPulse are over a VPN, not over TLS/SSL.