Policy application question

[Alex_Samad]

Hi

So I created an application 

TEST HTTPS tcp/443

TEST HTTP tcp/443

and a policy from any where to 10.10.10.10/24 application TEST HTTPS & TEST HTTP allow

and then deny everything else

if I go to my test box say 10.20.20.20/24 (different network), presume I can ping.

I run 

telnet 10.10.10.10.443

it connects and i type GET /

This will fail, but the PA's say its applicaiton web-browsing - it doesn't use my application type.

how can I make it use my applation type and stop it from looking at the packets

[VinceM · Accepted solution]

Hi,

You need to configure "Application override".

https://live.paloaltonetworks.com/t5/Learning-Articles/Tips-amp-Tricks-How-to-Create-an-Application-....

This is the only way, in palo, to diable L7 analysis.

Just keep in mind that by disabling L7, all security profile (Spyware / Antivirus ..) are disable on these flow.

Hope help

Rgds