topic Re: Custom App Cloning in General Topics https://live.paloaltonetworks.com/t5/general-topics/custom-app-cloning/m-p/29140#M21313 <HTML><HEAD></HEAD><BODY><P>A workaround (sort of) for this is when you create your custom app you can also choose "parent app" (page 227 in admin guide panos 5.0):</P><P></P><P>"</P><P>Parent App</P><P>Specify a parent application for this application. This setting applies when a session matches both the parent and the custom applications; however, the custom application is reported because it is more specific.</P><P>"</P><P></P><P>This way you can "copy" the matching in the "original" (parent) app and add the more specific stuff on your own.</P><P></P><P>For example if you only wish to allow HEAD, GET, POST as http-methods you can create a custom app, choose "web-browsing" as parent app and then add your custom signature that http-method HEAD, GET or POST must match.</P><P></P><P>Then use this custom app to allow http traffic instead of the original "web-browsing".</P><P></P><P>One drawback is this is highly dependent on that the parent app must be detected first. Which means you need to do the same thing again for other http-based apps if you want them to be limited to only use HEAD, GET or POST as http-methods (like create one for facebook, one for linkedin, one for youtube etc).</P><P></P><P>Perhaps PA could enlighten us if there is a pending feature request of be able to select multiple parentapps at once (or an application group) to make the life of the admin easier when it comes to custom apps which depends on already existing apps?</P></BODY></HTML> Fri, 29 Mar 2013 08:55:08 GMT mikand 2013-03-29T08:55:08Z Custom App Cloning https://live.paloaltonetworks.com/t5/general-topics/custom-app-cloning/m-p/29138#M21311 <HTML><HEAD></HEAD><BODY><P>Last question for today (but thanks for the previous responses - you all are very patient with the newbies): Is it possible to copy application definitions in order to make a custom one? I was looking for a clone app process that would save time for custom apps that were similar in design. Thanks again.</P></BODY></HTML> Fri, 29 Mar 2013 00:37:07 GMT https://live.paloaltonetworks.com/t5/general-topics/custom-app-cloning/m-p/29138#M21311 joehansen 2013-03-29T00:37:07Z Re: Custom App Cloning https://live.paloaltonetworks.com/t5/general-topics/custom-app-cloning/m-p/29139#M21312 <HTML><HEAD></HEAD><BODY><P>It is not possible to view the&nbsp; app-signatures for the default applications provided by PaloAlto .</P><P><SPAN style="font-size: 10pt; line-height: 1.5em;"> Custom-App created by a user can be cloned and the signatures would be copied that way.</SPAN></P><P>-Ameya</P></BODY></HTML> Fri, 29 Mar 2013 01:56:31 GMT https://live.paloaltonetworks.com/t5/general-topics/custom-app-cloning/m-p/29139#M21312 UhMayYeah 2013-03-29T01:56:31Z Re: Custom App Cloning https://live.paloaltonetworks.com/t5/general-topics/custom-app-cloning/m-p/29140#M21313 <HTML><HEAD></HEAD><BODY><P>A workaround (sort of) for this is when you create your custom app you can also choose "parent app" (page 227 in admin guide panos 5.0):</P><P></P><P>"</P><P>Parent App</P><P>Specify a parent application for this application. This setting applies when a session matches both the parent and the custom applications; however, the custom application is reported because it is more specific.</P><P>"</P><P></P><P>This way you can "copy" the matching in the "original" (parent) app and add the more specific stuff on your own.</P><P></P><P>For example if you only wish to allow HEAD, GET, POST as http-methods you can create a custom app, choose "web-browsing" as parent app and then add your custom signature that http-method HEAD, GET or POST must match.</P><P></P><P>Then use this custom app to allow http traffic instead of the original "web-browsing".</P><P></P><P>One drawback is this is highly dependent on that the parent app must be detected first. Which means you need to do the same thing again for other http-based apps if you want them to be limited to only use HEAD, GET or POST as http-methods (like create one for facebook, one for linkedin, one for youtube etc).</P><P></P><P>Perhaps PA could enlighten us if there is a pending feature request of be able to select multiple parentapps at once (or an application group) to make the life of the admin easier when it comes to custom apps which depends on already existing apps?</P></BODY></HTML> Fri, 29 Mar 2013 08:55:08 GMT https://live.paloaltonetworks.com/t5/general-topics/custom-app-cloning/m-p/29140#M21313 mikand 2013-03-29T08:55:08Z