topic Re: Custom App with Dynamic in General Topics https://live.paloaltonetworks.com/t5/general-topics/custom-app-with-dynamic/m-p/42587#M31278 <HTML><HEAD></HEAD><BODY><P>Configuring application overide policy bypasses the application ID engine on the PAN, thus making it a port based application.</P><P>The setting 'Application Default' uses the ports defined by the application engine which you are now bypassing, therefore it would not apply in this case.</P><P>The ovveride policy should only apply for that source destination and port range specified.</P></BODY></HTML> Wed, 23 Mar 2011 01:35:14 GMT gsamuels 2011-03-23T01:35:14Z Custom App with Dynamic https://live.paloaltonetworks.com/t5/general-topics/custom-app-with-dynamic/m-p/42586#M31277 <HTML><HEAD></HEAD><BODY><P>If I have a custom application which uses default port as tcp/dynamic, and then on the application override policy, I define a TCP range, say 9400-9699, and configure a policy which allows this app, with service as 'application-default', what would be the net effect on permitted TCP ports?</P></BODY></HTML> Tue, 22 Mar 2011 15:12:18 GMT https://live.paloaltonetworks.com/t5/general-topics/custom-app-with-dynamic/m-p/42586#M31277 bbivolaku 2011-03-22T15:12:18Z Re: Custom App with Dynamic https://live.paloaltonetworks.com/t5/general-topics/custom-app-with-dynamic/m-p/42587#M31278 <HTML><HEAD></HEAD><BODY><P>Configuring application overide policy bypasses the application ID engine on the PAN, thus making it a port based application.</P><P>The setting 'Application Default' uses the ports defined by the application engine which you are now bypassing, therefore it would not apply in this case.</P><P>The ovveride policy should only apply for that source destination and port range specified.</P></BODY></HTML> Wed, 23 Mar 2011 01:35:14 GMT https://live.paloaltonetworks.com/t5/general-topics/custom-app-with-dynamic/m-p/42587#M31278 gsamuels 2011-03-23T01:35:14Z