Misidentification on App-ID

thematrix0101 — Thu, 22 Sep 2016 18:40:27 GMT

Has anyone experience the App-ID misidentify existing Apps? Here is the problem we are having. I have rules allow SMTP (Application-Default) from the Mail Firewall to Exchange. Since yesterday (9/21), the firewall is identifing all the SMTP traffic as Unknown-TCP (25) and drop the traffic. We are running 614-3540 as the Application and Threats, it got updated last night to 615-3546. I have added Unknown-TCP to the SMTP rules to allow email to flow, but I would like to fine the root cause of the problem.

Re: Misidentification on App-ID

TranceforLife — Thu, 22 Sep 2016 21:43:27 GMT

Hi,

Did you try to revert back to the 614-3540 version and observe the behaviour?

topic Re: Misidentification on App-ID in General Topics

Misidentification on App-ID

Re: Misidentification on App-ID