Appid ms-teams-audio-video vs ms-lync-audio

[KenVaBr]

We're having both legacy lync users and Teams users in our network. But for the life of me: I don't seem to get hits on "ms-teams-audio-video" .

Is it because the data itself is not different enough so the contentid engine can't see the difference? Does it need decrypting to see the difference? Using the latest appid updates on a PANOS 9.1

If anyone has some tips: shoot 🙂

[BPry]

@KenVaBr,

Unless you're decrypting traffic you won't see that app-id, you should just be seeing ms-teams. I personally don't actually decrypt that traffic either.