Basic application control question

[jkougoulos]

Hello,

I am trying to understand if there is some form of hierarchy in the applications. For example, I see that there is an application called "Cisco Webex Teams" and an application called "Cisco Webex Teams-video".

Reading sk112249 , I get the feeling that "Cisco Webex Teams" is a superset of "Cisco Webex Teams-video".
However, when I create a rule matching "Cisco Webex Teams" and below a rule matching "Cisco Webex Teams-video", I see hits also on the last rule (with the -video).

So, what is the proper way for allowing fully such applications (that have also -xxxxx apps)?

Should I add all applications that start with the application name that I need to allow, or the above mentioned issue could be perhaps of bug?

Is there any kind of secret wisdom based on tags perhaps?

Kind regards,

John

[David_C1]

No help on answering this (I see it was posted in 2022) but I have struggled with this question as well. If there were some sort of published "this app contains all of these sub-apps" as in your example below, that would be extremely helpful.

Dave

[the_rock]

I totally agree Dave. I usually add all the sub-apps available, as that seems to be the most logical approach.

[David_C1]

That would be one way to do it - but would you even know which "sub-apps" to add? For instance, which one of these (if any) would be a "sub-app" to Check Point Services:

 Dave

[the_rock]

To answer your question Dave, I have no clue in the world, sorry, I just add whatever comes up as sub-app, thats it.