topic Re: FEATURE REQUEST: Search applications by tcp/udp port number. in Automation/API Discussions

FEATURE REQUEST: Search applications by tcp/udp port number.

sheist — Tue, 09 Apr 2013 17:16:00 GMT

I'm currently working on "migrating" a policy from a port-based firewall to an application aware firewall... The problem I keep running into is what application(s) are already part of the PANOS that use said port?

It would be AWESOME if I could search by port number and choose the application that most closely matches my traffic.

Re: FEATURE REQUEST: Search applications by tcp/udp port number.

ericgearhart — Tue, 09 Apr 2013 17:18:11 GMT

I strongly sense that someone from Palo Alto is going to swoop in on this thread, and suggest that you let your Sales Rep know about this feature request. That's the normal channel they try to push us toward for feature requests we have had in the past.

Re: FEATURE REQUEST: Search applications by tcp/udp port number.

sheist — Tue, 09 Apr 2013 17:21:02 GMT

One of the things I really like about other vendors, is that I can open a feature request on their support site... another feature request?

Re: FEATURE REQUEST: Search applications by tcp/udp port number.

ericgearhart — Tue, 09 Apr 2013 17:54:58 GMT

Haha yea it's kind of annoying... I'll sign on your feature request for a "feature requests system" if you get one open

Re: FEATURE REQUEST: Search applications by tcp/udp port number.

SRA — Tue, 09 Apr 2013 17:58:47 GMT

The Application Objects browser on the WebUI as well as the Applipedia page on the Internet provide free text search including searching by port numbers.

Re: FEATURE REQUEST: Search applications by tcp/udp port number.

sheist — Tue, 09 Apr 2013 18:07:33 GMT

I agree that the string searching provided a little info on the gateway itself... however the search results differ from Applipedia. In either case, it would be nice to receive an explicit "no app on this port" if there is not an application currently configured that uses specifically that port.

As an example, searching for "5383" on a PANOS box returned a single application object, which has a range of ports that encompasses port 5383. Applipedia returned no results for me...

I'm always worried about varying results where results should not vary, and don't like leaving anything to interpretation.