Question to app dependencies

[MPI-AE]

Hi guys!

I'm new to Palo Alto.

Scneario:

I make a new rule from an inside zone to the internet with the app gmx-mail.

gmx-mail depends on web-browsing and ssl.

Do I have to add web-browsing and ssl to this rule to make gmx-mail work?

Or could I make another separate rule where I'm allowing web-browsing and ssl?

Thanks, Alex

[TranceforLife]

Hi,

If the app dependent on other apps just allowing gmx-mail inside security policy won't work, you must allow web-browsing and ssl fro the rule to match. 

So all apps should be allowed withing one policy.

Thx,

Myky

[MPI-AE]

Thank you!

I would like to ask something else:

If I want to make a security rule with a service - not with an app:

Under objects -> services I define a new service. For example service xyz port number tcp 499. (just an example)

So how do I have to set up the rule?

Under Service/URL Category -> Service: I have to select "select" and then my service object.

But what do I have to select under Application? "Any" ?

I just want to allow port 499 (example), nothing else.

(when I have traffic there isn't an app)

Or is there an app for every traffic?

[kdd]

Hi,

if you add app-id then it is more detailed. So if you choose port 449 and app-id xyz then

only app-id xyz with port 449 is allowed.

regards

Klaus

[MPI-AE]

Hi Klaus,

I think you are taking about the rule, right?

But what if I have a certain type of traffic there isn't an app. I can't choose an app in the rule, can I?

[kdd]

Hi MPI-AE,

just select the port and the app-id is any.

cheers,

Klaus