Micro App Discovery

Hi Stevan,

Micro App Discovery will mandate the users to import appliance CA into their systems. Do they have the appliance CA already imported? OR configure an exception for the onedrive.live.com in web > exception.

Any help with that?

Good Morning!  Thanks for the information.  We had pushed out the Device Certificate to everyone but did not push out the Parent (Default) certificate and once that was installed, I am now able to access the sites that were once broken.

Can you please define what each certificate is so that I can better understand the difference between the two?

Thanks!

Good Morning!  Thanks for the information.  We had pushed out the Device Certificate to everyone but did not push out the Parent (Default) certificate and once that was installed, I am now able to access the sites that were once broken.

Can you please define what each certificate is so that I can better understand the difference between the two?

Thanks!

Hi Steven,

Please post your new question in a separate thread. We have an unwritten rule of one question per thread, which makes it simple for others who are searching for solutions.

Alongside, if my suggestion helped you please click on "this helped me" button. That turns it into a solution which can be referred by other.

Thanks

Looks like I spoke too soon.  I tested this yesterday after installing the default certificate to my PC and it seemed to work.  However, when I went to check on my settings it turns out Micro App Discovery was turned off.

I would like to keep this on and still allow people to be able to access websites such as Onedrive.live.com

Thanks,

Steve Gear

Do you have any other recommendations?

Please and Thanks!

Hi Steven,

Check #1 in the guide here.

Any catch?

When I look at the log viewer for Application Filter, and filter on my username, I am seeing the traffic denied from our external IP address to varying internet IPs for Application "VPN Master"

Onedrive's addresses are apparently getting defined as VPN Master for some reason?  How do I work around this without turning off Micro App Discovery and/or the VPN Master application in my application filter? 

Thanks!

Hi Steven,

If the one drive application is denied incorrectly as VPN Master then it can be a miscategorization but, I haven't  heard it from any other user. Hence, I will test and revert you back.

Meanwhile, can you post a screenshot of the log viewer page and also the log lines captured by checking #1 in the guide.

Thanks

Hi Steven,

I tested this in my labs, OneDrive is wrongly classigied as VPN Masters in XG. Removing MicroApp scanning in the application filter policy make things easy, I can login to OneDrive and access the files but applying the scanning will turn things down. I would like you to report this to support as the application signature is miscategorized.

Thanks 

Thanks, I have an incident open with support.  I will pm you the case#.