New App-IDs for January 2020

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
L7 Applicator

App-IDs for January 2020App-IDs for January 2020

Palo Alto Networks releases new App-IDs every month and the LIVEcommunity wants to make sure you're up to date. Take some time to review the App-IDs for this month and decide if you need to update your security policies. Get answers on LIVEcommunity.

 

 

New App-IDs for January 2020

It's time to recap all of the new APP-IDs for January 2020.  We have added 10 new apps just for the January 22nd update. With the popularity of streaming applications, we have added new apps for AppleTV+  and Disney+. We have even added a new app for the popular Overwatch game.

 

Below is a list of new applications that will be available with the Applications and Threats content release on January 22, 2020*.

 

Here are some ways you can use this information:

  • Find out if you will get visibility and control for an application that is heavily used in your environment.
  • Determine whether a new functional App-ID for an existing application affects your security policy structure.

 

New Applications (10)

Name Description Previously Identified As
appletvplus Apple TV+ is an over-the-top, ad-free subscription video on-demand web television service of Apple Inc. AppleTV+ content is viewable through Apple's website and through Apple's TV app. This App-ID covers the streaming traffic of AppleTV+ http-video, ssl, web-browsing
disneyplus Disney+ is the on-demand, ad-free streaming service. With Disney+, subscribers can watch thousands of Disney movies and series from their devices (smart TVs, phones, laptops, tablets, and gaming consoles). The service includes unlimited downloads, so users can watch anywhere, anytime. This App-ID covers the streaming traffic of Disney +. http-audio, http-video, ssl, web-browsing
houseparty Houseparty is a social networking service that enables group video chatting through mobile and desktop apps. This App-ID covers the traffic of Houseparty on Chrome and mobile platforms. rtcp, ssl, stun, web-browsing, websocket
overwatch Overwatch is an online team-based game generally played as a first-person shooter video game. The game features several different game modes that are principally designed around squad-based combat with two opposing teams of six players each. This App-ID identifies the Overwatch game traffic from Windows client. battle.net, ssl, unknown-tcp, unknown-udp
paloalto-zero-touch-provision Zero Touch Provisioning service streamlines initial deployment processes by allowing network administrators to ship devices directly to their branches without the need of specialized IT staff to provision the device. This App-ID covers the ZTP service traffic for Palo Alto Networks devices. ssl
pkix-cmp The Certificate Management Protocol (CMP) is an internet protocol used for obtaining X.509 digital certificates in a public key infrastructure (PKI). It is described in RFC 4210. unknown-tcp, web-browsing
ring The Ring Video Doorbell is a smart doorbell that contains a high-definition camera, a motion sensor, and a microphone and speaker for two-way audio communication. rtcp, rtp-base, ssl, stun, web-browsing
traceroute6 traceroute is a computer network diagnostic tool for displaying the route (path) and measuring transit delays of packets across an Internet Protocol (IP) network. traceroute outputs the list of traversed routers in simple text format, together with timing information. Traceroute is available on most operating systems. This App-ID covers the traceroute over IPv6. ipv6-icmp-base
universal-data-mover Universal Data mover is a managed file transfer solution. UDM monitors data availability, transfers data from any platform in any format in a secure, reliable, and regulatory way. The App-ID covers traffic between the UDM manager and the local server hosted on a Windows machine. unknown-tcp
ws-discovery Web Services Dynamic Discovery (WS-Discovery) is a technical specification that defines a multicast discovery protocol to locate services on a local network. It operates over TCP and UDP port 3702 and uses IP multicast address 239.255.255.250. As the name suggests, the actual communication between nodes is done using web services standards, notably SOAP-over-UDP. This App-ID covers WS-Discovery's communication between nodes using SOAP-over-UDP over port 3702. unknown-udp

* - Information originally published in the Customer Resources available to customers only: New App-IDs For January 22, 2020

 

Thanks for taking time to read my blog.
If you enjoyed this, please hit the Like (thumbs up) button, don't forget to subscribe to the LIVEcommunity Blog.

 

As always, we welcome all comments and feedback in the comments section below.

 

Stay Secure,
Joe Delio
End of line

7 Comments
L0 Member

@jdelio the app id for Ring still needs work. it's not working.

L7 Applicator

@JStuder  Like anything else, if you are experiencing issues with it, please contact support, as something isn't correct and that is the only way support will know something needs to be done.

L0 Member

I have a case open. I've already spent a couple hours on the phone with a tech, but no resolution yet. still working the ticket. Hopefully I'll have a resolution soon. 

L2 Linker

Where can I find a running list/history of new App-IDs?  For example - the list of new AppIDs for 8/2020 (if any).  Would be nice if applipedia lists a "release date." 

L7 Applicator

@ice-quake 
For every release, there are well documented release notes.. 

They are located both inside your WebGUI > Device > Dynamic Updates .. then click "release notes"

OR

Inside the support Portal: https://Support.paloaltonetworks.com

Updates > Dynamic Updates > Release Notes

app-release notes1.pngapp-release notes2.png

 

L2 Linker

Not exactly what I'm looking for.  I like to find out exactly when an AppID was released without searching through individual release notes.  Would be nice if applipedia lists a "release date" for each AppID.  

L7 Applicator

@ice-quake 

I think I see what you mean.   

The way to get that to happen is to put in a Feature Request with an SE (Sales Engineer) as they are the ones that put in these requests to the developers. 

  • 9181 Views
  • 7 comments
  • 2 Likes
Register or Sign-in
Labels
Top Liked Authors