Pre-defines application not working ?

annielee — Fri, 04 Jun 2021 08:29:04 GMT

Apology for asking multiple question for the past one week..

We've define a policy to allow active-directory-base application which includes most of the AD standard ports, but the traffic is not hitting the policy, eventhough the destination ports are a match. Any reason why ?

As a workaround for now, we added new custom service for the policy and it worked, but still puzzled why it's not hitting the policy above.

Thanks

Re: Pre-defines application not working ?

Remo — Fri, 04 Jun 2021 11:04:02 GMT

Hi @annielee

The reason probably is that this one application simply isn't enough. When you look at the application information, you will see thst there are other apps which active-directory-base depends on. What application did you see in the logs which was not allowed?

If you try to allow domain communication from domain joined clients/servers, please take a look at this post: https://live.paloaltonetworks.com/t5/general-topics/allow-workstations-to-join-domain-controller/m-p/409235/highlight/true#M92431

topic Pre-defines application not working ? in General Topics

Pre-defines application not working ?

Re: Pre-defines application not working ?