Description

Botim application is not working

Symptoms

Botim traffic is getting dropped

Solution

Botim Messaging is a mobile communication application to make audio/video calls and chat. 

 

Non-working Configuration :

root@abc# show |display set |match policy

set security policies global policy BOTIM-Application match source-address Internal_Networks

set security policies global policy BOTIM-Application match destination-address any

set security policies global policy BOTIM-Application match dynamic-application junos:BOTIM

set security policies global policy BOTIM-Application match from-zone Trust

set security policies global policy BOTIM-Application match to-zone Untrust

set security policies global policy BOTIM-Application then permit

 

If the "match application" option is not used, the policy will match the Layer 4 destination port based on the Junos default ports from the app ID. This can lead to issues when traffic is using non-standard ports for any dynamic applications.

 

As a workaround, you can configure a custom application under "applications" or use "match application any" to ensure the policy does not rely on Junos default ports.
 

Below is the example configuration 

root@abc# show |display set |match policy

set security policies global policy BOTIM-Application match source-address Internal_Networks

set security policies global policy BOTIM-Application match destination-address any

set security policies global policy BOTIM-Application match application any

set security policies global policy BOTIM-Application match dynamic-application junos:BOTIM

set security policies global policy BOTIM-Application match from-zone Trust

set security policies global policy BOTIM-Application match to-zone Untrust

set security policies global policy BOTIM-Application then permit

Modification History

2024-09-12 : Article Created