Traffic seen as application "authentic8-silo"

Farzana — Mon, 21 Aug 2017 11:21:04 GMT

Hi,

On our PA device, we suddenly have this issue that lots of traffic is seen as application "authentic8-silo" which is not allowed.

Lots of services (Lync/Skype for Business, websites and other services) which use SSL do not work anymore.

There was no change/upgrade done before the issue started. Only the daily App/Thread/AV/URL filtering update

The traffic is now hitting the our "Block and Log" rule and there everything that is not allowed is being blocked.

The rules that the traffic should hit is set to "any" service or "application-default".

The Application db version on both devices is: 725-4172 (08/16/17)

No SSL decryption is enabled and there is no application override rule for this application.

We failed over to the passive device and there is works fine. Any thought on this?

Thanks in advance.

Re: Traffic seen as application "authentic8-silo"

TranceforLife — Mon, 21 Aug 2017 11:32:32 GMT

Hi,

This looks quite abnormal. Get tech support file from Active and log TAC case.

Remo — Mon, 21 Aug 2017 13:39:28 GMT

Tried reinstall or revert the apps and threats update?