postscript-pdl application classification - buggy

[jdprovine]

We are setting up a new printing zone on the PA and have created a rule that allow the following applications , postscript-pdl, hp-jetdirect, lpd, snmp. It allows one page to print to the printer and then it stops. After much testing we added a second rule below  the first fule bu the applications are set to any. It allows everything to print normally unless we disable the 2nd rule. It also does not show any printer traffic hitting the second rile so it acts as thought the application classification for postscript-pdl is not working correclty

[pulukas]

I think the best approach here would be to open an official ticket to notify the app-id team that this is not working correctly.

You can follow the pcap instructions here to capture the failed traffic for them so they can analyze why the traffic is not correctly being identified.

https://live.paloaltonetworks.com/t5/Management-Articles/App-IDs-PCAPs-and-Custom-Signatures/ta-p/56...

[jdprovine]

Thanks I did open a TAC ticket and the issue has been resolved

[TranceforLife]

Hi,

What was the solution for this one?

Cheers,

Myky

[jdprovine]

We really didn't find any but with some other issues if we disable and re-enable some rules that were working and seem to have stopped it seems to kick start them into working again