Custom App Cloning

Reply
Not applicable

Custom App Cloning

Last question for today (but thanks for the previous responses - you all are very patient with the newbies): Is it possible to copy application definitions in order to make a custom one? I was looking for a clone app process that would save time for custom apps that were similar in design. Thanks again.

L5 Sessionator

Re: Custom App Cloning

It is not possible to view the  app-signatures for the default applications provided by PaloAlto .

Custom-App created by a user can be cloned and the signatures would be copied that way.

-Ameya

L6 Presenter

Re: Custom App Cloning

A workaround (sort of) for this is when you create your custom app you can also choose "parent app" (page 227 in admin guide panos 5.0):

"

Parent App

Specify a parent application for this application. This setting applies when a session matches both the parent and the custom applications; however, the custom application is reported because it is more specific.

"

This way you can "copy" the matching in the "original" (parent) app and add the more specific stuff on your own.

For example if you only wish to allow HEAD, GET, POST as http-methods you can create a custom app, choose "web-browsing" as parent app and then add your custom signature that http-method HEAD, GET or POST must match.

Then use this custom app to allow http traffic instead of the original "web-browsing".

One drawback is this is highly dependent on that the parent app must be detected first. Which means you need to do the same thing again for other http-based apps if you want them to be limited to only use HEAD, GET or POST as http-methods (like create one for facebook, one for linkedin, one for youtube etc).

Perhaps PA could enlighten us if there is a pending feature request of be able to select multiple parentapps at once (or an application group) to make the life of the admin easier when it comes to custom apps which depends on already existing apps?

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!