topic PanOS 5 application dependancy in General Topics

PanOS 5 application dependancy

cryptochrome — Tue, 27 Nov 2012 13:16:07 GMT

Hi,

I have a question about the new PanOS 5 feature that's supposed to handle application dependancies automatically (or better). Do I need to enable this somewhere or configure it? I am running 5.0 and when commiting, it still reminds me about application dependancies and that I need to add more apps to make certain rules work.

Thanks

Sascha

Re: PanOS 5 application dependancy

gwesson — Tue, 27 Nov 2012 18:32:29 GMT

Hi Sascha,

Not every application with a dependency was added to the automatic functionality of 5.0. Some of the most common such as web-browsing, ssl, msrpc, rtmp, and several others are included. You do not need to enable the behavior as it is now a base function of PAN-OS. There is also not a complete list because it changes dynamically with the Apps & Threats that is updated weekly.

Hope this helps!

Greg Wesson

Re: PanOS 5 application dependancy

BobW — Wed, 28 Nov 2012 02:34:21 GMT

I too would like to see some more of these included.

Examples I have are:

Activesync, outlok-web require the manual addition of ssl and web-browsing.

A more interesting one is that World of Warcraft requires bittorent, which I obviously am not interested in enabling.

Note that I work at a boarding school so I am running into all kinds of obscure (and international) rule combinations.

Bob