topic t.120 and Twitter-base in General Topics

t.120 and Twitter-base

MathewRD — Wed, 29 Jan 2020 23:22:48 GMT

Hello all,

Looking for more information on these two applications if anyone can assist. We're deploying firewalls as an MSSP and some of the traffic we're seeing hit application-based policies doesn't seem to make sense. Some of the examples we've seen are;

t.120 hitting 21/22

yelp-base hitting 80/443

twitter-base hitting 21/22, 80, 443

We aren't doing decryption on the web traffic, but some of the applications coming across seem rather strange. The IPs hitting these are a mix of threat IPs and clean ones. The most I could think of for yelp-base and twitter-base is that possibly the web site has some integration with those sites, but then I still have the issue with t.120 where the applipedia definition for it is rather vague.

Any recommendations or help is appreciated!

Re: t.120 and Twitter-base

OtakarKlier — Thu, 30 Jan 2020 17:46:24 GMT

Hello,

Some applications have dependencies. Check out this tool for the Palo Alto applications.

https://applipedia.paloaltonetworks.com/

Regards,

Re: t.120 and Twitter-base

MathewRD — Thu, 30 Jan 2020 23:08:02 GMT

@OtakarKlierthe issue is with the Applipedia definitions of these and real traffic coming across. I don't believe this is an answer to the question.