topic Re: speedtest is not correctly identified with and without decryption 10.2.4 latest app-id in General Topics

speedtest is not correctly identified with and without decryption 10.2.4 latest app-id

nevolex — Sat, 15 Apr 2023 21:05:37 GMT

hi guys,

I searched through and it looks like it's an know issue that speedtest.net is not correctly identified by app-id

I use app -default setting on the policy

The policy cannot really see speedtest.net's traffic and identifies the traffic as ssl, speedtest uses customer port tcp 8080 which is obviously not part of ssl app id defined by pal alto

to bypass i have added under service custom port 8080 tcp and app as ssl, not speedtest app id as it was not identified and working anyway - it works this way

but later on I have enabled ssl decryption for testing purposes, hoping that the app will be correctly identified byt the firewall, however it did not work, palo alto still sees speedtest .net as pure ssl traffic

what can be a problem?

thank you

Re: speedtest is not correctly identified with and without decryption 10.2.4 latest app-id

JayGolf — Thu, 20 Apr 2023 18:54:30 GMT

Hi @nevolex ,

You can submit an application to Palo.

Re: speedtest is not correctly identified with and without decryption 10.2.4 latest app-id

Raido_Rattameister — Thu, 20 Apr 2023 19:39:33 GMT

I don't see traffic to 8080 when I run speedtest.net

Re: speedtest is not correctly identified with and without decryption 10.2.4 latest app-id

I.Stevkovski — Tue, 14 Jan 2025 07:51:31 GMT

Same here, I get TCP 8080 with "unknown-tcp" as application identified, although the "speedtest" app is properly configured, the traffic only partially is identified as speedtest, only when it is ssl on tcp 443, but not on tcp 8080.