topic Re: Policy configured with Application ID but sarda cloud saying I need to configure services as well ? in Next-Generation Firewall Discussions

Policy configured with Application ID but sarda cloud saying I need to configure services as well ?

din100 — Fri, 13 Dec 2024 08:48:02 GMT

Hi everyone,

I have my policies configured with the Application ID, and I’ve set the service to "any" because some applications use random ports.

However, Strata Cloud is recommending that I configure the services explicitly as well.

I was under the impression that if I configured the application in the policy, only that application would be allowed. Is that not correct?

Thanks for your input!

Re: Policy configured with Application ID but sarda cloud saying I need to configure services as well ?

Edsnow — Fri, 13 Dec 2024 13:04:52 GMT

Hi @din100 ,

The application you are selecting in the policy will check the for the application signature, you need to configure the service explicitly as application-default or you can configure the port specifically.

Re: Policy configured with Application ID but sarda cloud saying I need to configure services as well ?

din100 — Mon, 16 Dec 2024 08:39:30 GMT

If I have the service as "any" and select the application ID for few apps. It's not securing anything ? will it allow any other app as well on a different port ?