topic Re: Custom App-ID iMessage in General Topics

Custom App-ID iMessage

Rowan_C — Tue, 03 Sep 2013 11:35:01 GMT

Hi,

We have recently installed a PA-2020 at our college and am very happy with the device. The only issue we are having is that students are still able to use iMessage on their iPads. I can't find an existing app-id for that and am wondering if anyone has already created a custom id for such. I am going to follow the tech note on creating a custom ID tomorrow but would also like to see others have done.

Yours - Rowan

Re: Custom App-ID iMessage

HULK — Tue, 03 Sep 2013 16:44:03 GMT

Hi Rowan,

Could you please share pcap or screen shot of traffic logs for imessage app.

Thanks

Re: Custom App-ID iMessage

mbutt — Tue, 03 Sep 2013 20:14:06 GMT

HI Rowan,

You can check on our dev center. Someone might already have developed the signature for it.

https://live.paloaltonetworks.com/community/devcenter

Also if iMessage applicaiton is something that your environment can use. you can request it from our content team as well.

Here is a doc which explain how to request a new app

https://live.paloaltonetworks.com/docs/DOC-1879

Hope this helps.
Thanks

Numan

Re: Custom App-ID iMessage

buckZor — Sun, 27 May 2018 00:32:16 GMT

You have to be kidding me that Apple iMessage has not been identified? Every other .02 instant messaging app is identified. Come on PAN!

Re: Custom App-ID iMessage

halil.ozel — Fri, 08 Sep 2023 12:37:48 GMT

Is there any update about new app-id for apple imessage?

Re: Custom App-ID iMessage

BPry — Tue, 12 Sep 2023 03:30:03 GMT

@halil.ozel,

There's no iMessage App-ID signature at this point yet to isolate this traffic, and I don't think you'll see one. As far as I'm aware, there's no identifying traffic to separate iMessage from the rest of apple-push-notifications traffic in a reliable manner. The manner of the service doesn't facilitate identification unlike most of their other services because it rides on top of a broader notification system.

Re: Custom App-ID iMessage

halil.ozel — Wed, 13 Sep 2023 13:17:06 GMT

I would like to learn that you got this outcome with your packet capturing analysis/experience or it is an assumption regarding Apple Push Notifications service working method.