topic Re: Application Still showing up after removal from Security Rule in General Topics

Application Still showing up after removal from Security Rule

MemphisBrothers — Fri, 07 Feb 2014 15:24:18 GMT

I recently added the ms-lync-online app to a rule in my PA-500. We decided we didn't need it and removed it. After a month of commits and saves that app is still showing up in the commit window summary and asking for a required app with it. I have checked everywhere and that app is not part of any rule but the PA unit still thinks it is. Any ideas how to clear this.

Re: Application Still showing up after removal from Security Rule

HULK — Fri, 07 Feb 2014 15:51:31 GMT

Hello Sir,

While you are applying a commit on this firewall, it should show the "rule name" along with the warning messages.

Example:: Rule 'XYZ' application dependency warning:

Application 'ms-lync-base' requires 'kerberos' be allowed, but 'kerberos' is denied in Rule 'DenyAny'

Application 'ms-lync-base' requires 'sip' be allowed, but 'sip' is denied in Rule 'DenyAny'

Application 'ms-lync-base' requires 'soap' be allowed, but 'soap' is denied in Rule 'DenyAny'

Could you please verify that rule once. If that rule is not having an application "MS-LYNC" added, then do a "commit force" from CLI else, Deactivate that rule >>> commit and activate again >>> commit.

Hope this helps

Thanks

Re: Application Still showing up after removal from Security Rule

Phoenix — Fri, 07 Feb 2014 16:12:25 GMT

Hello MemphisBrothers,

We can commit the whole config and just not the differential config. This is how we do.

configure

commit force

Once this is done can you test if you still see this.

If still seen can we do config Audit for the latest 2 config versions ( ALL for the lines ) and search for keyword ms-lync-online.

Also we can export the running configuration to a xml file and do search for the keyword ms-lync-online.

These should resolve or direct the resolution.

Re: Application Still showing up after removal from Security Rule

MemphisBrothers — Fri, 07 Feb 2014 16:24:12 GMT

It does. I just didn't get that part in the copy. I did remove it from the attached rule. The message is erroneous.

Re: Application Still showing up after removal from Security Rule

HULK — Fri, 07 Feb 2014 16:32:00 GMT

Hello,

You can try with "commit force" from CLI.

Else, Deactivate that rule >>> commit and activate again >>> commit.

Thanks

Re: Application Still showing up after removal from Security Rule

MemphisBrothers — Fri, 07 Feb 2014 16:34:05 GMT

Tried the commit force in CLI. No good. Still showing up. How do you export the config to XML?

Re: Application Still showing up after removal from Security Rule

Phoenix — Fri, 07 Feb 2014 16:52:14 GMT

Below is the image explaining where to go and how to export config file. They get exported as xml as they are in the format of xml.

Re: Application Still showing up after removal from Security Rule

MemphisBrothers — Fri, 07 Feb 2014 17:07:19 GMT

I was able to open the current config in XML and did a search for ms-lync-online. No matches found. This is looking like a bug

Re: Application Still showing up after removal from Security Rule

HULK — Fri, 07 Feb 2014 17:44:45 GMT

Have you tried deactivating that rule >>> commit and activate again >>> commit.

Re: Application Still showing up after removal from Security Rule

MemphisBrothers — Fri, 07 Feb 2014 19:29:30 GMT

Cannot do this until late at night after bus, hours

Re: Application Still showing up after removal from Security Rule

Retired Member — Fri, 07 Feb 2014 22:50:02 GMT

Could you please tell your OS version also ?

Re: Application Still showing up after removal from Security Rule

MemphisBrothers — Sat, 08 Feb 2014 02:54:19 GMT

5.0.10

Re: Application Still showing up after removal from Security Rule

MemphisBrothers — Sat, 08 Feb 2014 03:02:00 GMT

I am trying this now.

Re: Application Still showing up after removal from Security Rule

HULK — Sat, 08 Feb 2014 03:09:29 GMT

Hope for the best.

Re: Application Still showing up after removal from Security Rule

MemphisBrothers — Sat, 08 Feb 2014 03:38:26 GMT

It looks like disabling the rule, committing, and enabling, committing did it. Thanks everyone