topic Re: Application-default for dynamic protocol in General Topics https://live.paloaltonetworks.com/t5/general-topics/application-default-for-dynamic-protocol/m-p/25384#M18499 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>I think this will allow any TCP port to be used.</P><P></P><P>This sort of rule is always going to generate lots of unknown / insufficient-data type log entries but it might reduce it a bit.</P><P></P><P>Regards,</P><P>Dave</P></BODY></HTML> Fri, 18 Nov 2011 12:12:02 GMT DavePalo 2011-11-18T12:12:02Z Application-default for dynamic protocol https://live.paloaltonetworks.com/t5/general-topics/application-default-for-dynamic-protocol/m-p/25383#M18498 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>How does the PA device work when we define a rule that allow an application that use dynamic ports and we specifiy the application-default service ?</P><P></P><P>As an example, I have a rule that allow application "rmi-iiop" (Java remote method invocation (RMI) interface over the Internet Inter-Orb Protocol (IIOP)), which is a predifined application.</P><P></P><P>When I have a look at the related logs, I see a lots of "unknown-tcp" and "insufficient-data"...</P><P></P><P>What if I specify the application-default service ? Since there are no native ports for this application, how will the PA device behave if I tried to use the appliaction-default service ?</P><P></P><P>Regards,</P><P></P><P></P><P>Laurent</P></BODY></HTML> Fri, 18 Nov 2011 10:25:03 GMT https://live.paloaltonetworks.com/t5/general-topics/application-default-for-dynamic-protocol/m-p/25383#M18498 ldormond 2011-11-18T10:25:03Z Re: Application-default for dynamic protocol https://live.paloaltonetworks.com/t5/general-topics/application-default-for-dynamic-protocol/m-p/25384#M18499 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>I think this will allow any TCP port to be used.</P><P></P><P>This sort of rule is always going to generate lots of unknown / insufficient-data type log entries but it might reduce it a bit.</P><P></P><P>Regards,</P><P>Dave</P></BODY></HTML> Fri, 18 Nov 2011 12:12:02 GMT https://live.paloaltonetworks.com/t5/general-topics/application-default-for-dynamic-protocol/m-p/25384#M18499 DavePalo 2011-11-18T12:12:02Z