Versions Compared

Old Version 8

changes.mady.by.user Jean-luc KRIKER

Saved on

compared with

New Version Current

changes.mady.by.user Jean-luc KRIKER

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


https://docs.128technology.com/docs/concepts_appid/#appid-based-on-tls

...

4 ways to detect application:

  • module
  • TLS sni

https://junipernetworks.sharepoint.com/:w:/r/sites/128TImplementation/_layouts/15/Doc.aspx?sourcedoc=%7B57E0814D-4DBB-4698-949F-4E6BF05AE634%7D&file=SSR%20BCP%20-%20App%20ID.docx&action=default&mobileredirect=true

Order to identify application:

Image Added


OptionsTLS , Module, HTTP
HTTP
  1. Using DNS to resolve FQDNs to IP addresses
TLSCreate Service
TLS  SNIThis is done by inspecting the X.509 certificate sent by a server during the TLS handshake process. 
Module


Enabletls or/and module

Configuration > Authorization > Router > SELECT seattlesite1

go to :  Application Identification


Image Modified


5.4 Release

Configuration > Authorization > Router > Application Identification Settings 


Image Modified

Image Modified



In PCLI:

admin@128T-RTR-Branch-1.seattlesite1# shell
[admin@128T-RTR-Branch-1 ~]$ ls /etc/128technology/application-modules/
app_module_utils defaults office365.py
[admin@128T-RTR-Branch-1 ~]$


Documentation from Microsoft and link to the list of Microsoft IP address ( REST-API json)

https://docs.microsoft.com/en-us/microsoft-365/enterprise/microsoft-365-ip-web-service?view=o365-worldwide


View Application

Select a router

Image Modified

Image Removed


Image Added

Create Service




netify app

https://www.netify.ai/resources/applications
search 

https://www.netify.ai/resources/applications_reference


Image Added





Test servicesService configuration for every applications

https://appid-webtool.ssrdemos.com/


Image Added

IPsec

Image Added

Image Added