Custom App-ID iMessage

[Rowan_C]

Hi,

We have recently installed a PA-2020 at our college and am very happy with the device. The only issue we are having is that students are still able to use iMessage on their iPads. I can't find an existing app-id for that and am wondering if anyone has already created a custom id for such. I am going to follow the tech note on creating a custom ID tomorrow but would also like to see others have done.

Yours - Rowan

[HULK]

Hi Rowan,

Could you please share pcap or screen shot of traffic logs for imessage app.

Thanks

[mbutt · Accepted solution]

HI Rowan,

You can check on our dev center. Someone might already have developed the signature for it.

https://live.paloaltonetworks.com/community/devcenter

Also if iMessage applicaiton is something that your environment can use. you can request it from our content team as well.

Here is a doc which explain how to request a new app

https://live.paloaltonetworks.com/docs/DOC-1879

Hope this helps.
Thanks

Numan

[buckZor]

You have to be kidding me that Apple iMessage has not been identified?  Every other .02 instant messaging app is identified.  Come on PAN!

[halil.ozel]

Is there any update about new app-id for apple imessage?

[BPry]

@halil.ozel,

There's no iMessage App-ID signature at this point yet to isolate this traffic, and I don't think you'll see one. As far as I'm aware, there's no identifying traffic to separate iMessage from the rest of apple-push-notifications traffic in a reliable manner. The manner of the service doesn't facilitate identification unlike most of their other services because it rides on top of a broader notification system. 

[halil.ozel]

I would like to learn that you got this outcome with your packet capturing analysis/experience or it is an assumption regarding Apple Push Notifications service working method.