topic Anyplace remote control to be stopped in General Topics

Anyplace remote control to be stopped

ta185020 — Sun, 10 Apr 2011 07:27:57 GMT

Hi,

A remote control online solution called Anyplace Control(anyplace-control.com), and this needs to be stopped.
Palo Alto shows this as "unknown-tcp", and as such it may be disastrous to stop all unknown-tcp.

I need this to be blocked as an application block, but do not know how to
proceed. Please advise.

Rgds,

Tauseef

Re: Anyplace remote control to be stopped

kbrazil — Sun, 10 Apr 2011 18:45:36 GMT

Hi Tauseef,

You can submit a new App-ID request here:

http://www.paloaltonetworks.com/researchcenter/submit-an-application/

You can also request an App-ID through Support. They will typically ask for a packet capture of the traffic to expedite the process of creating the App-ID signature.

Cheers,

Kelly

Re: Anyplace remote control to be stopped

kbrazil — Sun, 10 Apr 2011 18:47:40 GMT

One more thing - in the mean time you can create an App-Override policy to control the application by IP/Protocol until an App-ID signature is created. Create your own custom Application and tie it to the App-Override policy.

Cheers,

Kelly