Application Dependencies

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Application Dependencies

L1 Bithead

Hi all,


First time post.

 

If you add all the required dependent applications to security policy (e.g. for Skype: msn-base, ssl & web-browsing), does this then allow all of those apps out dependent of if the primary Skype app is being used for that policy?

i.e does it allow msn-base, ssl & web-browsing from the source IP address to the destination address even if Skype isn't the primary Application?

 
5 REPLIES 5

Cyber Elite
Cyber Elite

Yes

But you can limit down destination where connections can be done with "Destination",  "URL Category" and "URL Profile".

Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011

But you'd need to have a valid URL filtering license for this.

 

It's as I expected but I wanted to get it confirmed.

 

Thanks for the reply.

Some applications work even without all the dependencies allowed. It's worth to try.

The apps that can function without their dependencies in the security policy, will have the dependencies listed as 'implicitly uses'. The corresponding dependency AppID decoder will be triggered, but the dependency apps do not need to be allowed in the security policy for the intended app to function properly

 

2016-08-09_14-24-14.jpg

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

You can create custom URL categories without license and use those.

Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011
  • 2640 Views
  • 5 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!