thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Intermediate

App-ID

Palo Alto Networks NGFW technology that identifies applications in traffic regardless of port, protocol, or encryption.

Definition

App-ID uses application signatures, protocol decoding, heuristics, and decryption to classify traffic, so security policies can allow or block specific applications. It continues reclassifying as a session progresses, such as from ssl to web-browsing to facebook-base. It works with User-ID and Content-ID in PAN-OS policy.

Example

A security policy allows the application 'ms-teams' while denying 'bittorrent' even if it uses port 443.

Exam tip

App-ID identifies applications, not just ports; use application-default service to restrict to standard ports.

Related terms