Teamspeak 3x file transfers failing but VOIP works

[rmcrae]

Teamspeak 3 has an existing app-ID that works for people connecting to use the VOIP features but it fails when they try and use the file transfer feature.  The session on the client looks like it tries to start but then fails.  When I check the traffic log on the firewall I can see the application is being identified as 'unknown-tcp' with action 'deny'.  I have saved off a couple of the pcaps for the failed sessions but I don't know fix this.  

Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended.

[OtakarKlier · Accepted solution]

Hello,

I havent used this application but here is how I treat other applications that may do something similar. First I would make sure I also set in the same policy some type of destination, URL filtering, or DNS entry, IP not so much since its probably cloud and changes a lot. Then in the same policy allow the 'unknown-tcp' application. This way the policy is still locked down to just what you need, ie URL, DNS destination, etc.

Hope that helps.

[rmcrae]

That's a good work around.  Would be nice if the app-id recognized it though.

[OtakarKlier]

Hello,

You can submit a request for a new app-id.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clu2CAC

Regards,