Experience Center
Defining a Dynamically Discovered Application
When you configure Private Applications to discover applications, the Discovered Applications widget in the Applications dashboard displays the applications that have been discovered for your organization. You will see all of the discovered applications listed in row order, with the most recently discovered applications listed in the first row.
If you want to define a user access policy for a specific application listed in the Discovered Applications widget, or want to be able to change other settings for it (e.g., enable health reporting or configure bypass settings), you can explicitly define the application within an application segment. Also, when you hover over a discovered application, you can see the date and time when the application was discovered.
If an application was discovered over 14 days in the past, then the User Activity Diagnostics corresponding to application discovery will not be available.
When defining a new application segment, Zscaler recommends taking note of the following interaction between a wildcard domain and specific host domain, where wildcard no longer means wildcard:
- You have an app segment defined by a wildcard (*.exapp.company.com).
- You add the app segment to an access policy.
- You create a new app segment (file.exapp.company.com).
The app segment in the third bullet is not covered by the access policy. By defining the app segment (file.exapp.company.com) separately, you need to add a new access policy because the application is matched to the specific app segment. An application will always match to the most specific app segment, even if that application could potentially match a wildcard app segment. For policy, the policy with the most specific app segment will be evaluated.
The ports specified in the app segments that contain IP subnets or wildcards towards app segments that contain more specific IPs or FQDNs are not applied. You will need to explicitly specify the ports in the app segment that contain the IPs or FQDNs.
To define a discovered application in the Applications dashboard:
- Go to the Applications dashboard (Analytics > Reports > Private Applications > Applications).
- In the Discovered Applications widget, click Add Application Segment.
- Select the applications you want to define, then click Define Selected Applications.
The Add Application Segment window appears.
- In the Add Application Segment window, add an application segment.