Create an Application

Create an application to include in an application list. Use application lists to build rules in a firewall policy.

An application is defined by a signature based on the protocols it uses. Layer 7 inspection is used to identify matching applications. You can have a maximum of 6,000 applications in each policy.

After you create applications, add them to an application list in the policy. You can't add applications from one policy to a list in a different policy. The application must be created within each policy you want to use it in.

You can instead import several applications at the same time using a .json file. For more information, see Import Firewall Policy Components.

    1. Open the navigation menu, and select Identity & Security. Under Firewalls, select Network Firewall policies.
    2. Select that compartment that contains the policy that you want to create the application in.
    3. Select the policy.
    4. On the details page, select the Applications tab.
    5. From within the User-defined Applications table, select Create user- defined application.
    6. In the Name box, enter a name for the application. Some names are reserved by Palo Alto Networks® and can't be used. Avoid entering confidential information.
    7. Under Protocol, select the protocol to define the application, ICMP or ICMPv6.
    8. In the ICMP type or ICMPv6 type list, select the type.
    9. In the ICMP code or ICMPv6 code list, select a code.
      For more information about ICMP types and codes, see Internet Control Message Protocol (ICMP) Parameters.
    10. Select Create application.
  • Use the network-firewall application create command and required parameters to create an application:

    oci network-firewall application create --name my_app
    --network-firewall-policy-id network firewall policy OCID --compartment-id compartment OCID[OPTIONS]

    For a complete list of parameters and values for CLI commands, see the CLI Command Reference.

  • Run the CreateApplication operation to create an application.