Management Articles

List of Apps with metadata change for Content version 575

by msandhu ‎04-05-2016 01:43 PM - edited ‎04-06-2016 12:26 AM (3,675 Views)

This is an article to help understand the release note for Application and Threat Content version 575. With this version Palo Alto Networks has made a metadata change to improve virus detection capabilities for these apps and should have no effect on how these applications are identified. 

 

Frequently Asked Questions:

 

1. Will this change effect how the following App-IDs are identified?

Answer: No this change will not alter how the following App-IDs are identified. This is not a signature change for any of the following App-IDs

 

2. What is metadata ? And what is a metadata change?

Answer: App-ID metadata are attributes of an App-ID that define its characteristics and capabilities. For instance an application timeout or a risk value is an example of metadata for an App-ID. A metadata change is when one of  these attributes is changed to improve application capabilities. 

 

3. What metadata change was made for the following App-IDs?

Answer: The metadata change made for the following App-IDs is to improve virus detection and reporting capabilities for the following App-IDs. 

 

4. Will this metadata change have any impact on my current configuration like application filters?

Answer: No this change will have no impact on the current configuration.

 

2ch
2ch-posting
51.com
51.com-bbs
51.com-games
51.com-mail
51.com-music
51.com-posting
adnstream
adobe-connectnow
adobe-echosign
adobe-meeting-remote-control
afreeca
aim-express
amazon-aws-console
amazon-instant-video
ameba-blog-posting
apple-vpp
arcgis
asana
asf-streaming
asproxy
atmail
att-locker
autodesk360
avaya-webalive-desktop-sharing
avoidr
badoo
baidu-webmessenger
base-crm
bbc-iplayer
beamyourscreen
beats-music
bebo-mail
bet365
blogger-blog-posting
blokus
bluejeans
boldchat-logmein
boxnet
boxnet-consumer-access
boxnet-editing
boxnet-enterprise-access
boxnet-uploading
brighttalk
buzzsaw
callpilot
camo-proxy
campfire
carbonite
cbs-video
cgi-irc
channel4
chatroulette
chinaren
chinaren-apps
chinaren-chat
chinaren-mail
chrome-remote-desktop
circumventor
classmates
clubbox
cnn-video
concur
constant-contact
convo
convo-chat
cooltalk
dabbledb
dailymotion
dcinside
dcinside-posting
deezer
digg-posting
disqus
docusign
dostupest
dotvpn
ebuddy
elastic-search
elluminate
emc-documentum-webtop
evony
eyejot
ezpeer
facebook
facebook-apps
facebook-chat
facebook-posting
facebook-rooms
facebook-social-plugin
fc2-blog-posting
fcc-speed-test
firefox-update
flixster
fotki
freecast
freeetv
friendfeed
friendster
friendvox
fuze-meeting
fuze-meeting-desktop-sharing
gifboom
gogobox
google-analytics
google-buzz
google-cache
google-calendar
google-calendar-enterprise
google-cloud-print
google-docs-editing
google-drive-web
google-finance-posting
google-hangouts
google-hangouts-audio-video
google-hangouts-chat
google-lively
google-location-service
google-maps
google-play
google-plus
google-plus-email
google-safebrowsing
google-translate
google-translate-auto
google-translate-manual
google-video
gotoassist
gyao
hi5
highrise
hootsuite
howardforums-posting
http-audio
http-video
hulu
hulu-posting
hyves
hyves-games
hyves-mail
hyves-music
icq2go
iheartradio
iloveim
im-plus
imeet
imgur
imo
insightly-crm
instan-t-webmessenger
intuit-quickbase
iqiyi
issuu
jango
jaspersoft
jira
join-me
jotspot-editing
kaixin-chat
kaixin-mail
kaixin001
kanban-tool
khan-academy
kino
koolim
labnol-proxy
laconica
last.fm
lastpass
letv
libero-video
linkedin
linkedin-apps
linkedin-intro
linkedin-mail
linkedin-posting
live365
livelink
liveperson
livestream
lokalisten
lotuslive
lotuslive-meeting
lotuslive-meeting-apps-sharing
magister
mail.ru-moimir
mail.ru-webagent
mcafee-epo-admin
me2day
meebome
meetup
meetup-email
meetup-forum
meevee
mega
megaproxy
megavideo
meinvz
mekusharim
meldium
messengerfx
meta4
metacafe
mgoon
mibbit
minecraft
minus
mixi
mlb.tv
morningstar-posting
motleyfool-posting
ms-exchange-admin-center
ms-lync-online-apps-sharing
ms-office365
ms-virtualserver
msn-money-posting
msn-webmessenger
msn2go
mymarkets
myspace-video
napster
nate-video
nbc-video
netbackup
netbotz
netflix-streaming
netspoke
new-relic
nextmedia-video
niconico-douga
ning
ning-apps
ning-mail
nomadesk
noteworthy-admin
odnoklassniki
odnoklassniki-messaging
okta
omegle
onelogin
onepagecrm
ontv
ooyala
oracle-forms
orb
paltalk-express
pandora
pandora-tv
panos-web-interface
party-poker
pathview
pentaho
photobucket
phweet
pingone
pinterest
pivotaltracker
plaxo
plex
plugoo-widget
pogo
powow
powow-file-transfer
proofhub
proxeasy
proxylocal
psiphon
puffin
pullbbang-video
quora
radiusim
ragingbull-posting
rally-software
rdio
readytalk
readytalk-chat
readytalk-desktop-sharing
renren
renren-apps
renren-chat
renren-music
renren-posting
rightscale
rover
rtmpt
ruckus
salesforce
samsung-updates
sap-jam
sap-jam-uploading
sbs-netv
schmedley
screencast
secret
secure-access
securemeeting
seesmic
sentillion
service-now
sharepoint-blog-posting
shutterfly
signnow
silverlight
sina-webuc
sina-weibo
sina-weibo-posting
slacker
smugmug
socialtv
solarwinds
solarwinds-npm
solarwinds-sam
speedtest
stagevu
stocktwits
stocktwits-posting
streamaudio
studivz
stumbleupon
sugar-crm
svtplay
t-online-mail
techinline
tidaltv
tokbox
torch-browser
torch-browser-games
torch-browser-music
tudou
tuenti
tumblr
tv4play
tvb-video
twitch
twitpic
twitter
twitter-posting
usermin
userplane
ustream
vbulletin-posting
veetle
veohtv
vevo
viadeo
vimeo
vkontakte
vkontakte-chat
vkontakte-mail
vnc-http
vtunnel
vyew
war2glory
watch-abc
watchdox
weather-desktop
webqq
websocket
whisper
winamp-remote
windows-azure
wink
woome
workday
xm-radio
yahoo-blog-posting
yahoo-calendar
yahoo-douga
yahoo-finance-posting
yahoo-notepad
yahoo-web-analytics
yahoo-webmessenger
youku
youku-uploading
yourminis
youtube
youtube-posting
youtube-safety-mode
yugma
zango
zoho-meeting
zoho-people
zoho-share
zwiki-editing
zynga-games

 

Comments
by pivvre
on ‎04-05-2016 10:49 PM

What on earth does this mean?
"This change has been made to improve virus detection capabilities for these apps and should have no effect on how these applications are identified.

What changes has been made, and why?
And how can we be sure it will not affect the identification of the applications? Here the developers must inform the users much better!

by KlausGroeger
on ‎04-05-2016 11:34 PM

Do you have some more information about the changes made? How can the customer ensure that nothing will happen after applying the new signatures? Does this concerns specific versions of PAN-OS or does it apply to all versions?

Best, Klaus

by msandhu
on ‎04-05-2016 11:54 PM

Hi Pivre, 

 

What on earth does this mean?

It means exactly what it says, i.e for the listed App-IDs we made metadata changes to improve virus detection capabilities. There has been no change made to the signature of these App-IDs. Metadata essentially means the attributes of an App-ID but not the actual signature. 

 

And how can we be sure it will not affect the identification of the applications?

With every content release that Palo Alto Networks releases we take it upon ourselves to QA this before releasing it to customers. Like it is mentioned in the release note this change will not effect how these applications get identified as these are not signature changes. 

by msandhu
on ‎04-06-2016 12:03 AM

Added FAQs to the article to provide more clarity

Ask Questions Get Answers Join the Live Community
Contributors