Application Group vs Filter

[migration]

What is the distinction between an application group and a filter?  What is the best practice for each?

Thanks,

Todd

[James · Accepted solution]

Hi Todd,

Application Group:

Is a static item, into which you can add any applications you like which may or may not have any commonalities.

Application Filter:

Is a dynamic item that is created by selecting filter options (Risk, Category etc) in the application browser.  Any new applications coming to PAN-OS in a content update that match the same filters set will automatically be added to the Application Filter created.

So for example - you may tick peer-to-peer as a Technology filter.  Then rate shape or block all items that match that filter - perhaps for specific users.  Then a content update is added with a new application which use the peer-to-peer Technology description/category and will be added to the filter without configuration.

An application group will only ever change if done so by an Administrator - this is typically used to group applications that combined are used by a set of users or for a particular service.

Hope this helps

Thanks

James