topic Re: Modify application in General Topics

Modify application

Sjoerd — Wed, 10 Jan 2018 11:13:44 GMT

One of the applications (a default one in the Palo Alto) sometimes connects over an other port than the defined standard port for the application. Since I defined the plicys service as 'application default', this traffic gets blocked.

Its the application 'magister', which has a standard port of tcp,443 but sometimes connects over 943 & 4502.

The applications user manual (dutch, chapter 3.5) says this ports must be opened for optimal usage, otherwise the application can work slow.

Can i change this application in the firewall? Should i ask Palo Alto to change this? Should i create a custom application?

Thanks in advance!

Re: Modify application

kiwi — Wed, 10 Jan 2018 11:57:34 GMT

Hi @Sjoerd,

You could add the ports a service instead of using application-default.

You also might want to reach out to TAC and have them review the application in case you would like the ports to be added to the application-default ones.

Cheers !

-Kiwi

Re: Modify application

Sjoerd — Wed, 10 Jan 2018 12:11:25 GMT

Hi Kiwi, Thanks for youre response!

I already added the ports as services for a workaround, but i think a better solution would be to change the application.

Probably a stuppid question, but what is TAC and how to reach them?

Re: Modify application

kiwi — Wed, 10 Jan 2018 12:14:47 GMT

Hi @Sjoerd,

Sorry if that wasn't clear.

TAC = Technical Assistance Center ... or technical support 😄

https://www.paloaltonetworks.com/company/contact-support

Cheers !

-Kiwi,