topic postscript-pdl application classification - buggy in General Topics

postscript-pdl application classification - buggy

jdprovine — Fri, 29 Jul 2016 14:04:44 GMT

We are setting up a new printing zone on the PA and have created a rule that allow the following applications , postscript-pdl, hp-jetdirect, lpd, snmp. It allows one page to print to the printer and then it stops. After much testing we added a second rule below the first fule bu the applications are set to any. It allows everything to print normally unless we disable the 2nd rule. It also does not show any printer traffic hitting the second rile so it acts as thought the application classification for postscript-pdl is not working correclty

Re: postscript-pdl application classification - buggy

pulukas — Sat, 30 Jul 2016 12:31:45 GMT

I think the best approach here would be to open an official ticket to notify the app-id team that this is not working correctly.

You can follow the pcap instructions here to capture the failed traffic for them so they can analyze why the traffic is not correctly being identified.

https://live.paloaltonetworks.com/t5/Management-Articles/App-IDs-PCAPs-and-Custom-Signatures/ta-p/56014

Re: postscript-pdl application classification - buggy

jdprovine — Mon, 01 Aug 2016 12:52:37 GMT

Thanks I did open a TAC ticket and the issue has been resolved

Re: postscript-pdl application classification - buggy

TranceforLife — Mon, 01 Aug 2016 19:54:04 GMT

Hi,

What was the solution for this one?

Cheers,

Myky

Re: postscript-pdl application classification - buggy

jdprovine — Mon, 01 Aug 2016 20:28:08 GMT

We really didn't find any but with some other issues if we disable and re-enable some rules that were working and seem to have stopped it seems to kick start them into working again