topic Skype screensharing uses "u-meeting" app-id in General Topics

Skype screensharing uses "u-meeting" app-id

RVizcarra — Mon, 06 Jun 2022 05:55:38 GMT

Hi Guys, is it normal that Skype uses this u-meeting app-id every time user uses the screen sharing feature?
I tried to block this app-id and the screen sharing stops working.
Because I only allow app-ids listed on this article: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRbCAK

Re: Skype screensharing uses "u-meeting" app-id

kiwi — Thu, 09 Jun 2022 09:21:06 GMT

Hi @RVizcarra ,

The community feedback area is used for specific community related questions.

I've moved your topic to the general discussions area instead.

As for your question, this might be a mis-identification of the app.

Try getting a pcap of said traffic and forward to TAC for analysis/confirmation so they can update the app-id signatures if necessary.

Cheers !

-Kiwi.

Re: Skype screensharing uses "u-meeting" app-id

BPry — Mon, 13 Jun 2022 02:44:19 GMT

@RVizcarra,

Do you have the latest application and threat (or just apps) package installed? I haven't seen this across any of our customers with the latest update applied.

Re: Skype screensharing uses "u-meeting" app-id

RVizcarra — Mon, 13 Jun 2022 05:29:50 GMT

Hi @kiwi @BPry , thank you so much for your feedback guys!
I believe so it was a misidentification and corrected on latest content update.