PanOS 5 application dependancy

L3 Networker

PanOS 5 application dependancy


I have a question about the new PanOS 5 feature that's supposed to handle application dependancies automatically (or better). Do I need to enable this somewhere or configure it? I am running 5.0 and when commiting, it still reminds me about application dependancies and that I need to add more apps to make certain rules work.



L7 Applicator

Hi Sascha,

Not every application with a dependency was added to the automatic functionality of 5.0. Some of the most common such as web-browsing, ssl, msrpc, rtmp, and several others are included. You do not need to enable the behavior as it is now a base function of PAN-OS. There is also not a complete list because it changes dynamically with the Apps & Threats that is updated weekly.

Hope this helps!

Greg Wesson

L4 Transporter

I too would like to see some more of these included.

Examples I have are:

Activesync, outlok-web require the manual addition of ssl and web-browsing.

A more interesting one is that World of Warcraft requires bittorent, which I obviously am not interested in enabling.

Note that I work at a boarding school so I am running into all kinds of obscure (and international) rule combinations.


Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!