App-ID and the Network Security Agent
Use the Network Security Agent in Strata Copilot to automate App-ID workflows
including troubleshooting classification issues.
| Where Can I Use This? | What Do I Need? |
|
|
- Strata Cloud Manager Pro
- This feature is currently in Beta and available on request.
Contact your account team to enable the feature.
- Superuser role (for agent administration, onboarding, and
managing permissions)
- Network Administrator or Security Administrator role (for
agent interaction)
|
This feature leverages a large language model or generative AI, and may contain
errors. Double-check for accuracy before applying changes.
The
Network Security Agent in Strata™ Cloud
Manager is an AI-powered entity that automates complex security workflows using
natural language. The Troubleshooting expert agent specializes in diagnosing
connectivity failures, device health anomalies, and performance issues by correlating
telemetry, logs, and network data to identify root causes and generate remediation
steps.
For App-ID, the Troubleshooting agent automates the diagnosis of application access
failures caused by classification issues—such as content updates that change how
App-ID classifies an application, custom App-ID conflicts, or application dependency
problems. App-ID classifies network traffic by identifying the application based on
signatures, protocol decoding, and heuristics. When classification changes
unexpectedly, security policy rules that rely on accurate App-ID classification can
block traffic without any obvious policy or infrastructure change.
You interact with the Troubleshooting agent through Strata Copilot, describing the
issue in natural language. The agent gathers additional details through a guided
conversation, generates an investigation plan, and presents findings with recommended
remediation steps. For the full list of available workflows, see
Troubleshooting Agent Workflows.