topic Re: APP-ID reclassification process in Cloud NGFW for AWS Discussions

APP-ID reclassification process

Mauricio_Gerez — Fri, 31 Mar 2023 09:32:44 GMT

Hi Team

If an application changes port, how is the reclassification process in the NGFWs?

Re: APP-ID reclassification process

ssyed — Wed, 26 Jul 2023 19:30:48 GMT

https://www.paloaltonetworks.com/blog/2010/09/app-id-and-the-rule-of-all/

Re: APP-ID reclassification process

JeremyGlaus — Mon, 25 Sep 2023 10:30:28 GMT

You can get a nice overview how the Firewall handels different stages at this Flowchart Overview. There you can see that the App Identification process starts as soon as a packet has an unidentified app. I assume that this is the case after an application shift during an session.