Custom Application Signatures

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Custom Application Signatures

L2 Linker

Curious if anyone is successfully using the commvault application within their Palo Alto application policies? We tried it and it is not working at all to detect our CommVault application traffic. The details on the application itself seem quite old.

4 REPLIES 4

Cyber Elite
Cyber Elite

was there a related question about custom signatures? 😛

 

the commvault app was last updated in august, so it's possible something was changed in the latest incarnation that causes it to not be identigfied properly in App-ID, you could reach out to support to have this investigated (they'll need packetcaptures and logs to verify)

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

Cyber Elite
Cyber Elite

@zthiel,

Or if you really hate dealing with support and simply want the traffic to identify as CommVault, you could do like I've done and simply utilize an Application override policy and setup the traffic to match to commvault. It's lazy and stops the inspection at Layer4, but I still get to yell at my backup admin for using an ass-ton of bandwidth 😉 

I'm just confused as to why the standard ports are: tcp/dynamic and not itimized out ports\protocols.

@zthiel,

I don't know enough about how commvault is actually configured to properly answer that question. I would assume that it's to do with the fact that you can customize commvault's ports and that it doesn't utilize only a standard set of ports by default? 

  • 2642 Views
  • 4 replies
  • 0 Likes
  • 101 Subscriptions
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!