topic Re: About traceroute APP-ID in General Topics

About traceroute APP-ID

ttongfly — Fri, 20 Apr 2012 01:39:37 GMT

Hi guys.

I found that traceroute APP-ID on Applipedia web-site as below

So I updated newest signature of Application and Threat that version to my PA box is 303-1361 (2012/04/17) but I could not find the traceroute APP-ID on my box.

Why it is deffrent between newst signature and applipedia app-id list? When do I use the traceroute app-id?

Thanks.

Regards.

Roh.

Re: About traceroute APP-ID

mikand — Fri, 20 Apr 2012 07:31:49 GMT

Which PANOS do you have currently running?

According to https://live.paloaltonetworks.com/docs/DOC-1730 PANOS 3.1 and 4.0 doesnt support ICMP code to make custom app-id, a guess would be that some appid's isnt available for older PANOS - could this be true in this case?

And according to https://live.paloaltonetworks.com/docs/DOC-2727 the traceroute app seems to have been recently added (since the doc is posted 23 march 2012 stating that traceroute app currently doesnt exist) so perhaps it might be available on the next threat db update?

(And according to a post from october 2011 it didnt exist at that time at least but seems to have been in progress: https://live.paloaltonetworks.com/message/10116#10116)

Re: About traceroute APP-ID

ttongfly — Fri, 20 Apr 2012 07:53:58 GMT

HI mikand

Customer has running PANOS 4.0.10 and could not make custom app-id for ICMP as you discussed.

I think should be waited for next threat update to add traceroute app-id

Thanks for kind answer!

Have a good day.

Regards.

Roh.