Traffic seen as application "authentic8-silo"

Farzana · ‎08-21-2017

Hi,

On our PA device, we suddenly have this issue that lots of traffic is seen as application "authentic8-silo" which is not allowed.

Lots of services (Lync/Skype for Business, websites and other services) which use SSL do not work anymore.

There was no change/upgrade done before the issue started. Only the daily App/Thread/AV/URL filtering update

The traffic is now hitting the our "Block and Log" rule and there everything that is not allowed is being blocked.

The rules that the traffic should hit is set to "any" service or "application-default".

The Application db version on both devices is: 725-4172 (08/16/17)

No SSL decryption is enabled and there is no application override rule for this application.

We failed over to the passive device and there is works fine. Any thought on this?

Thanks in advance.

Remo · ‎08-21-2017

Tried reinstall or revert the apps and threats update?

TranceforLife · ‎08-21-2017

Hi,

This looks quite abnormal. Get tech support file from Active and log TAC case.

Remo · ‎08-21-2017

Tried reinstall or revert the apps and threats update?