topic Re: App-IDs, PCAPs and Custom Signatures in General Topics

App-IDs, PCAPs and Custom Signatures

Rahimbhamani — Fri, 10 Mar 2017 07:19:32 GMT

Is there is any way to block flash player and java based application via App ID.

bradk14 — Fri, 10 Mar 2017 11:18:07 GMT

file block profile?

would require SSL decryption for full visibility however

Rahimbhamani — Fri, 10 Mar 2017 12:04:43 GMT

Well example if user open the website https://www.java.com/en/download/installed8.jsp to verify the java. the palo alto will be blocked by palo alto is it possbile?

Java verfication

reaper — Fri, 10 Mar 2017 12:55:52 GMT

there's no fileblocking file type for .jsp , but there are for .jar , .exe , .msi and .dmg (the actual installers)

you can also create a custom threat to block the installed8.jsp file if you like : Tutorial: Custom Vulnerability