04-10-2011 12:27 AM
Hi,
A remote control online solution called Anyplace Control(anyplace-control.com), and this needs to be stopped.
Palo Alto shows this as "unknown-tcp", and as such it may be disastrous to stop all unknown-tcp.
I need this to be blocked as an application block, but do not know how to
proceed. Please advise.
Rgds,
Tauseef
04-10-2011 11:45 AM
Hi Tauseef,
You can submit a new App-ID request here:
http://www.paloaltonetworks.com/researchcenter/submit-an-application/
You can also request an App-ID through Support. They will typically ask for a packet capture of the traffic to expedite the process of creating the App-ID signature.
Cheers,
Kelly
04-10-2011 11:47 AM
One more thing - in the mean time you can create an App-Override policy to control the application by IP/Protocol until an App-ID signature is created. Create your own custom Application and tie it to the App-Override policy.
Cheers,
Kelly
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
