Identifying iPad App Traffic

[DariusvanWijk]

Greetings

I have a PA-220 Running Version 8.1.9-h4

Current problem is that some teachers use iPads and some of them use an app called SEESAW.

The app loads fine on the iPad but seem to be blocked from the cloud resources it should have access to.

Using it on Mobile data everything loads fine.

Using it through the Firewall I eventually get a message "Can't Connect to Server" "Retry"

I have gone to the Monitor tab and using the iPad's IP have checked

>Traffic
>Threat
>URL Filtering
as well as a few others.
nothing is coming up as Blocked everything seems to be allowed.

I cannot work out what or where the traffic is being blocked.

Any Advice or hints are appreciated.

[SutareMayur]

@DariusvanWijk,

If security policy is application specific, please check if any dependent app is not allowed in the policy. If this is not the case,

take one system in the same subnet which belongs to iPAD and try traceroute to the destination IP addresses seen in traffic logs and check if it passes firewall.

-Mayur

[DariusvanWijk]

@SutareMayur 

Do you mean that i should go to Objects > Applications and add SEESAW to the allowed application list?
If so then i cannot as PALO does have a SEESAW application listed as an option.

I also checked here https://applipedia.paloaltonetworks.com/

[SutareMayur]

@DariusvanWijk ,

I mean what type of security policy u have written for allowing traffic?? is it application based or service based??

Mayur

[DariusvanWijk]

@SutareMayur 

There are a list off applications that are allowed, Under objects > Application groups that the iPads are allowed to use and then under Objects > URL Filtering there the URL Categories that are blocked or allowed.