discrepancy regarding web-browsing ports between applipedia and Pan-OS application

[Carracido]

Dear community!

Did you notice that there´s an discrepancy regarding web-browsing ports between applipedia and Pan-OS application?

If you check for web-browsing details in the firewall you see standard port 80 and secure port 443. 

In the applipedia you can see only standard port 80 associated to the web-browsing application:

This can be misleading if you trust the applipedia, because actually when you create a rule with web-browing and service = application-default the traffic will match this rule on ports 80 and 443.

Have you ever checked with Palo Alto about this fact?

[OtakarKlier]

Hello,

Could be a simple mistake on their part, I would say open a case and see where it takes you.

Regards,

[Brandon_Wertz]

It's not a mistake, it's a further detail.

[Brandon_Wertz]

The answer to your question is related to SSL decryption.  I do though think that applipedia should match what the FW's description says.

The reason the FW says the "secure port" for web-browsing is 443 is because when you do SSL Interception and the traffic is just general web-browsing the initial application is "SSL" which is 443/tcp.  Then once SSL Interception is successful the traffic sees an application shift and app SSL moves to "web-browsing."  If the traffic is something more specific like HBO or Netflix, the application would shift to that, but you'll see web-browsing over 443/tcp with SSL interception.