topic Re: What is 'cotp' ? in General Topics

What is 'cotp' ?

komure — Mon, 01 Jul 2013 09:28:18 GMT

Hi,

-----------------------------------------------------------------------

A new 'cotp' App-ID will be available in the upcoming content update for the ISO transport protocol 8073 over TCP. When allowing applications such as ms-rdp, t.120, and iccp, that use the COTP protocol, a policy change will be required to handle the dependency.

-----------------------------------------------------------------------

X.224�:�Information technology - Open Systems Interconnection - Protocol for providing the connection-mode transport service

ISO8073 is the same as ITU-T Recommendation x.224, right?

Therefore, can we recognize that 'cotp' should identify x.224?

If it is right, why didn't you name the application 'x.224'?

I think x.224 is better known than cotp...

Or Was there any particular reason?

Regards,

Tomoyuki Komure

Re: What is 'cotp' ?

mr.linus — Tue, 02 Jul 2013 13:14:41 GMT

FYI:

Update from PA:

"We received feedback from customers based on the advance notice provided earlier in the week, about impact to security policy for ms-rdp traffic specifically in PAN-OS versions before 5.0. We reviewed it internally and have determined not to release the cotp App-ID now. We will be looking at ways to create App-Ids for applications that use COTP without introducing an explicit dependency for ms-rdp. Sorry for the inconvenience caused."

Re: What is 'cotp' ?

UhMayYeah — Tue, 02 Jul 2013 23:03:43 GMT

WHat is COTP :COTP app will be used by any ISO applications that have been ported to run on TCP/IP. E.g. X.400 is a mail handling system.

T.120 and MS-RDP also use it.

Reason : This application was earlier identified under iccp .Since iccp and x.400 are based on cotp, COTP decoder was chosen to identify these 2 apps.

HTH