Custom App Cloning

[joehansen]

Last question for today (but thanks for the previous responses - you all are very patient with the newbies): Is it possible to copy application definitions in order to make a custom one? I was looking for a clone app process that would save time for custom apps that were similar in design. Thanks again.

[UhMayYeah · Accepted solution]

It is not possible to view the  app-signatures for the default applications provided by PaloAlto .

Custom-App created by a user can be cloned and the signatures would be copied that way.

-Ameya

[mikand]

A workaround (sort of) for this is when you create your custom app you can also choose "parent app" (page 227 in admin guide panos 5.0):

"

Parent App

Specify a parent application for this application. This setting applies when a session matches both the parent and the custom applications; however, the custom application is reported because it is more specific.

"

This way you can "copy" the matching in the "original" (parent) app and add the more specific stuff on your own.

For example if you only wish to allow HEAD, GET, POST as http-methods you can create a custom app, choose "web-browsing" as parent app and then add your custom signature that http-method HEAD, GET or POST must match.

Then use this custom app to allow http traffic instead of the original "web-browsing".

One drawback is this is highly dependent on that the parent app must be detected first. Which means you need to do the same thing again for other http-based apps if you want them to be limited to only use HEAD, GET or POST as http-methods (like create one for facebook, one for linkedin, one for youtube etc).

Perhaps PA could enlighten us if there is a pending feature request of be able to select multiple parentapps at once (or an application group) to make the life of the admin easier when it comes to custom apps which depends on already existing apps?