Application Group vs Filter

migration — Mon, 21 Feb 2011 11:56:04 GMT

What is the distinction between an application group and a filter? What is the best practice for each?

Thanks,

Todd

Re: Application Group vs Filter

James — Mon, 21 Feb 2011 12:30:30 GMT

Hi Todd,

Application Group:

Is a static item, into which you can add any applications you like which may or may not have any commonalities.

Application Filter:

Is a dynamic item that is created by selecting filter options (Risk, Category etc) in the application browser. Any new applications coming to PAN-OS in a content update that match the same filters set will automatically be added to the Application Filter created.

So for example - you may tick peer-to-peer as a Technology filter. Then rate shape or block all items that match that filter - perhaps for specific users. Then a content update is added with a new application which use the peer-to-peer Technology description/category and will be added to the filter without configuration.

An application group will only ever change if done so by an Administrator - this is typically used to group applications that combined are used by a set of users or for a particular service.

Hope this helps

Thanks

James

topic Application Group vs Filter in General Topics

Application Group vs Filter

Re: Application Group vs Filter