Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
03-21-2022 03:03 AM
I would like to know the setting detail on ADEM Application test Advanced Options.
As I see there are ADVANCED NETWORK TEST OPTIONS with TCP-443 and ADVANCED WEB TEST OPTIONS with https as a default setting.
What is the purpose of these setting? Any explanation document related to these options?
For example,
I would like to add a application test for non-SaaS application such as ms-rdp in internal network on ADEM.
After input target IP and application (ms-rdp), should I change the ADVANCED NETWORK TEST OPTIONS to TCP-3389? Or I just keep it in default?
03-22-2023 06:44 AM - edited 03-22-2023 06:47 AM
If you check https://docs.paloaltonetworks.com/autonomous-dem/autonomous-dem-admin/set-up-an-adem-application-tes... you will see:
Define Advanced Options as needed. By default ADEM sets the Network Test Options and Web Test Options based on the applications you selected. However, you can customize these options if needed in your environment.
This means that that for ms-rdp as the port by default is 3389 you shouldn't select it.
For web sites better aways use HTTPS than just TCP on 443 as the difference is obvious as HTTPS test is a real HTTP request over SSL/TLS while TCP on port 443 is just a tcp test on the 443 port. Still by default based on the application if it is web based ADEM should select HTTPS test but if you see that it is wrong just use the advanced options to overide it like you can with the ports if needed.
Also see:
To enable the app to connect to the ADEM service and to run the application tests, you must have a policy rule to allow the remote sites to connect to applications over HTTPS.
Alse see:
https://www.youtube.com/watch?v=qqakORCH-zU&t=1s
https://www.youtube.com/watch?v=JHDAf2KbF-E
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
