Forum Discussion

GiuDNica's avatar
GiuDNica
Comet
30 days ago

Policy Rule Not Hitting When Destination is Set to 'Any' – Expected Behavior?

Hi all, I ran into a situation with a security policy in Cato and would like to hear if anyone else has experienced something similar. Here is the scenario: I created a policy where the source sit...
network
security
Mihai's avatar
Mihai
Icon for Cato Employee rankCato Employee
27 days ago

Good morning GiuDNica,

I would suggest on looking how the Custom app is defined and check for any duplicates (For example APP A has 1.1.1.1 and 192.168.1.1 and APP B has 1.1.1.1 - this creates an overlap). Please create the app definition as detailed as possible (so not only IP's but port ranges and domains as well) as per our KB: https://support.catonetworks.com/hc/en-us/articles/4413265662993-Working-with-Custom-Apps#heading-2
In my experience this is noted to created app mismatches and as a result confuse the rule set base.

Let me know if that solved your problem and if it did, please my response as a solution.

Thanks,

Mihai