Focus

App-ID Features

Table of Contents

Filter

Expand All | Collapse All

Next-Generation Firewall Docs

Getting Started
Administration
Version
- Cloud Management of NGFWs
- PAN-OS 10.0 (EoL)
- PAN-OS 10.1
- PAN-OS 10.2
- PAN-OS 11.0
- PAN-OS 11.1
- PAN-OS 9.1
Networking
Version
- PAN-OS 10.1
- PAN-OS 10.2
- PAN-OS 11.0
- PAN-OS 11.1
AIOps
Incidents & Alerts
Release Notes
Version
- Cloud Management and AIOps for NGFW
- PAN-OS 10.0 (EoL)
- PAN-OS 10.1
- PAN-OS 10.2
- PAN-OS 11.0
- PAN-OS 11.1
- PAN-OS 8.1 (EoL)
- PAN-OS 9.0 (EoL)
- PAN-OS 9.1

SD-WAN Features

Panorama Features

App-ID Features

Learn about the new App-ID™ features in PAN-OS® 9.1.

New App-ID Feature	Description
Streamlined Application-Based Policy	You can now safely enable a broad set of applications with common attributes using a single policy rule. For example, you can enable broad access for your users to web-based applications using the Web App tag in an application filter, or safely enable all enterprise VoIP applications using the Enterprise VoIP tag. Palo Alto Networks researches new and updated applications, groups those with common attributes, and delivers this through tags in content releases. This: Minimizes errors and saves time. Helps you to create policy rules that automatically update to safely enable newly released applications. Simplifies the transition toward an App-ID based rule set using Policy Optimizer. You can also apply your own tags and create application filters based on those tags to address your own application security requirements.
Simplified Application Dependency Workflows	You now have simplified workflows to find and manage application dependencies. You can see and address application dependencies immediately in the Application tab as you create a new Security policy rule or add new applications to an existing rule. Commits provide another checkpoint for dependencies. When a policy rule does not include all application dependencies, you can directly access the associated Security policy rule from the Commit dialog to add the required applications.

New App-ID Feature

Description

Streamlined Application-Based Policy

You can now safely enable a broad set of applications with common attributes using a single policy rule. For example, you can enable broad access for your users to web-based applications using the

Web App

tag in an application filter, or safely enable all enterprise VoIP applications using the

Enterprise VoIP

tag. Palo Alto Networks researches new and updated applications, groups those with common attributes, and delivers this through tags in content releases. This:

Minimizes errors and saves time.

Helps you to create policy rules that automatically update to safely enable newly released applications.

Simplifies the transition toward an App-ID based rule set using Policy Optimizer.

You can also apply your own tags and create application filters based on those tags to address your own application security requirements.

Simplified Application Dependency Workflows

You now have simplified workflows to find and manage application dependencies.

You can see and address application dependencies immediately in the

Application

tab as you create a new Security policy rule or add new applications to an existing rule.

Commits provide another checkpoint for dependencies. When a policy rule does not include all application dependencies, you can directly access the associated Security policy rule from the Commit dialog to add the required applications.

SD-WAN Features

Panorama Features

Next-Generation Firewall Docs

App-ID Features

Next-Generation Firewall Docs

App-ID Features

Recommended For You

Activation and Onboarding

Next-Generation Firewalls

Cloud-Delivered Security Services

Network Security

Visibility & Monitoring

Best Practices

Experts Corner