Create an Application

Create an application to include in an application list. Use application lists to build rules in a firewall policy.

An application is defined by a signature based on the protocols it uses. Layer 7 inspection is used to identify matching applications. You can have a maximum of 6,000 applications in each policy.

After you create applications, add them to an application list in the policy. You can't add applications from one policy to a list in a different policy. The application must be created within each policy you want to use it in.

You can instead import several applications at the same time using a .json file. For more information, see Bulk Import Firewall Policy Components.

    1. On the navigation menu, select Identity & Security. Go to Firewalls, select Network Firewall Policies.
    2. Select the policy.
    3. Under Policy resources, select Applications.
    4. Select Create application.
    5. In the Name box, enter a name. Some names are reserved by Palo Alto Networks® and can't be used.
    6. Under Protocol, select the protocol to define the application, ICMP or ICMPv6.
    7. In the ICMP type or ICMPv6 type list, select the type.
    8. In the ICMP code or ICMPv6 code list, select a code.
      For more information about ICMP types and codes, see Internet Control Message Protocol (ICMP) Parameters.
    9. Select Create application.
  • Use the network-firewall application create command and required parameters to create an application:

    oci network-firewall application create --name my_app
    --network-firewall-policy-id network firewall policy OCID --compartment-id compartment OCID[OPTIONS]

    For a complete list of parameters and values for CLI commands, see the CLI Command Reference.

  • Run the CreateApplication operation to create an application.