topic Re: Question to app dependencies in General Topics

Question to app dependencies

MPI-AE — Tue, 01 Nov 2016 10:33:42 GMT

Hi guys!

I'm new to Palo Alto.

Scneario:

I make a new rule from an inside zone to the internet with the app gmx-mail.

gmx-mail depends on web-browsing and ssl.

Do I have to add web-browsing and ssl to this rule to make gmx-mail work?

Or could I make another separate rule where I'm allowing web-browsing and ssl?

Thanks, Alex

Re: Question to app dependencies

TranceforLife — Tue, 01 Nov 2016 10:40:33 GMT

Hi,

If the app dependent on other apps just allowing gmx-mail inside security policy won't work, you must allow web-browsing and ssl fro the rule to match.

So all apps should be allowed withing one policy.

Thx,

Myky

Re: Question to app dependencies

MPI-AE — Tue, 01 Nov 2016 11:01:14 GMT

Thank you!

I would like to ask something else:

If I want to make a security rule with a service - not with an app:

Under objects -> services I define a new service. For example service xyz port number tcp 499. (just an example)

So how do I have to set up the rule?

Under Service/URL Category -> Service: I have to select "select" and then my service object.

But what do I have to select under Application? "Any" ?

I just want to allow port 499 (example), nothing else.

(when I have traffic there isn't an app)

Or is there an app for every traffic?

Re: Question to app dependencies

kdd — Tue, 01 Nov 2016 11:10:41 GMT

Hi,

if you add app-id then it is more detailed. So if you choose port 449 and app-id xyz then

only app-id xyz with port 449 is allowed.

regards

Klaus

Re: Question to app dependencies

MPI-AE — Tue, 01 Nov 2016 11:17:52 GMT

Hi Klaus,

I think you are taking about the rule, right?

But what if I have a certain type of traffic there isn't an app. I can't choose an app in the rule, can I?

Re: Question to app dependencies

kdd — Tue, 01 Nov 2016 12:22:43 GMT

Hi MPI-AE,

just select the port and the app-id is any.

cheers,

Klaus