unknown-tcp and web application

[ghostrider]

Hello Experts

Just want to know, 

1- If PA can not identify the web application then it will classify it as SSL/Web-browsing or unknown-tcp?

2- unknown-tcp and unkown-udp is only for client/server application?

Regards,

GR

[ghostrider]

Thank for reply. Again sorry for my ignorance but want to ask:

1- In genral if I allow only web-browsing and SSL in security policy (assuming doing the SSL decryption) and PA identify the deepr application like fb-chat then in this case the access to that deeper application will be blocked? In short allowing web-browsing and SSL only, will not allow all web-applications?

2- Coming to proxy question, how I can know all the web applicaitons on internet, user will browse on internet and allow in policy?I just want allow all web-browsing and SSL from proxy to internet. What can I do?

[santonic]

1. Yes

2. Work with app categories or application filters as they are called. Or allow port 80 and 443 and only block selcted apps and/or categories. 

[ghostrider]

@santonic thank you!

[ghostrider]

@santonic Just one question, if I am not doing SSL decryption on PA, then all internet web-browsing would be boils down to SSL and web-browsing applications? So in security policy if I allow only web-browsing and SSL applications for bluecoat to internet traffic (browsing) then it would be fine right?

[santonic]

Nope.

On http traffic you will have a lot of applications always as it's not encrypted. 

On https traffic most of sessions will be recognised only as SSL without decryption. But in same cases (like for example TeamViewer where destination for CONNECT command is always something like *.teamviewer.com) specific application will be recognised even without decryption.