Description

This article provides solution on how to fix issue where traffic is not working as per configured Application Policy in MIST UI

Solution

By default, MIST pushes dynamic-application configuration for the Application Policies, which requires AppID database. Below are the workarounds that can be considered in order to fix the issue:

1) Remove dynamic-application configuration using the below statement in the Additional CLI commands section

delete security policies from-zone <from-zone> to-zone <to-zone> policy <policy-name> match dynamic-application

2) Select "Device HAS an APP Track license" option under Application Visibility section. This will automatically install AppID database on hardware devices as hardware devices come with in-built AppID license. For vSRX devices, AppID license is required to install AppID database

3) Manually install AppID database from the CLI of the device. Please refer to the below document to perform the same-

Downloading and Installing Predefined Junos OS Application Signature Packages

Modification History

2024-09-29 : Article Created