Micro App Discovery per firewall policy

Hi VJ,

You may try to improve the detection by increasing the IPS packet size. 

command in console

 set ips maxpkts 100

to configure to default

 set ips maxpkts default

You may try increasing from 8 to 100 to 200

Hi Aditya,

Thanks for replying.

Actually i already succefully blocked TOR browser by turning on microapp discovery and set ips maxpkts to 100. Want i want to do is to turn off microapp discovery to certain firewall policy. It seems that it is globally set. I am having problems with guest mobile devices connecting to the network. Is there a way?

Thanks again,

Hello VJ Taylan

  You don't have to enable microapp discovery any more on v16.5 mr4. It is only use for proof of concept. To block microapp you just need to enable Decrypt HTTPS Scan and IPS max packet scann to 100 or above. For more info you can refer bellow link.

https://community.sophos.com/kb/en-us/125458

Regards, Ronak.

Hello VJ Taylan

  You don't have to enable microapp discovery any more on v16.5 mr4. It is only use for proof of concept. To block microapp you just need to enable Decrypt HTTPS Scan and IPS max packet scann to 100 or above. For more info you can refer bellow link.

https://community.sophos.com/kb/en-us/125458

Regards, Ronak.

Hello Ronak,

I see, thanks for clearing that up. I confirm that TOR is no longer connecting even if microapp discovery is turned off.

Regards,