An administrator reads through the following Applications and Threats Content Release Notes before an update: Which rule would continue to allow the file upload to confluence after the update? A. B…

Question

Exhibits

Options

• ARule with Application: 'confluence uploading', Service: 'web-browsing'
• BRule with Application: 'confluence base', Service: 'web-browsing'
• CRule with Application: 'confluence uploading', Service: 'application-default'
• DRule with Application: 'confluence base', Service: 'application-default'

• A
  65% (40)
• B
  5% (3)
• C
  23% (14)
• D
  8% (5)

Explanation

When a PAN-OS content update introduces a new, more specific App-ID (such as splitting 'confluence uploading' from a broader parent application), rules using the parent application with 'application-default' service may stop matching upload traffic because the child application may use different port defaults than the parent. A rule explicitly specifying 'confluence uploading' as the application with 'web-browsing' as the service will continue to allow file uploads - it matches the specific sub-application and permits traffic on any standard web port, making it resilient to content update-driven App-ID splits.

No community discussion yet for this question.