ADEM Application test Advanced Options

[JoeKwok]

I would like to know the setting detail on ADEM Application test Advanced Options.

As I see there are ADVANCED NETWORK TEST OPTIONS with TCP-443 and ADVANCED WEB TEST OPTIONS with https as a default setting.

What is the purpose of these setting? Any explanation document related to these options?

For example,

I would like to add a application test for non-SaaS application such as ms-rdp in internal network on ADEM.

After input target IP and application (ms-rdp), should I change the ADVANCED NETWORK TEST OPTIONS to TCP-3389? Or I just keep it in default?

[nikoolayy1]

If you check https://docs.paloaltonetworks.com/autonomous-dem/autonomous-dem-admin/set-up-an-adem-application-tes... you will see:

Define Advanced Options as needed. By default ADEM sets the Network Test Options and Web Test Options based on the applications you selected. However, you can customize these options if needed in your environment.

This means that that for ms-rdp as the port by default is 3389 you shouldn't select it.

For web sites better aways use HTTPS than just TCP on 443 as the difference is obvious as HTTPS test is a real HTTP request over SSL/TLS while TCP on port 443 is just a tcp test on the 443 port. Still by default based on the application if it is web based ADEM should select HTTPS test but if you see that it is wrong just use the advanced options to overide it like you can with the ports if needed.

Also see:

https://docs.paloaltonetworks.com/autonomous-dem/autonomous-dem-admin/get-started-with-adem/enable-a...

To enable the app to connect to the ADEM service and to run the application tests, you must have a policy rule to allow the remote sites to connect to applications over HTTPS.

Alse see:

https://www.youtube.com/watch?v=qqakORCH-zU&t=1s

https://www.youtube.com/watch?v=JHDAf2KbF-E