topic Re: Where is app-id for https? in General Topics

Where is app-id for https?

MarioMarquez — Fri, 26 Oct 2018 19:47:19 GMT

I am trying to fulfill a request by my security team to enable app id on our palo alto rule base & I cannot find the app id for https. There is also a machine inside our envirionment that needs to be accessed over tcp 444 using https:// so I assume enabling app id won't break communication to this machine as long as I specify port 444 in the rule. Is that correct?

Re: Where is app-id for https?

Raido_Rattameister — Fri, 26 Oct 2018 19:54:20 GMT

App name is ssl.

ssl default port is 443 so if your security policy allows apps on default port then you need additional rule App=ssl and Service=tcp/443

Re: Where is app-id for https?

MP18 — Sun, 28 Oct 2018 01:00:20 GMT

please correct me if i am wrong.

if application is ssl then we can use application default in service tab as ssl uses port tcp/443 right.

Re: Where is app-id for https?

Raido_Rattameister — Sun, 28 Oct 2018 14:49:00 GMT

Initial post told that https traffic (ssl AppID) needs to run over port 444.

In this case you need rule that permits that.

ssl and application-default allows only on 443.

Looks like I did typo in my initial reply. 443 should be 444.

Re: Where is app-id for https?

MP18 — Sun, 28 Oct 2018 14:45:00 GMT

Thanks a lot I got it now.

I should have also read the inital post.