If that was useful/revelant , there would already exist applications called Firefox, Chrome, IE and Safari. They are all clients for well known protocols. If you look at client-server apps, they do not guarantee you are usuing official client for the application, it only recognizes the network behaviour/protocol of the service offered, not the program/binary behind this traffic. In addition, while User-Agent will work in most cases for HTTP (if you except the fact that it can be faked easily), other protocols don't have this kind of feature (ie: smtp, imap, pop, remote desktop, exchange ...all of them have compatible but no way to identify it at firewall level) In fact, PaloAlto should have called it ServiceID instead of AppID, it would have been clearer for everyone. Note that I am not against a "ProgramID" but I barely see it maintainable and accurate.
... View more
