Palo Alto Networks firewalls use Content-ID to examine the content of traffic to identify applications in logs and reports Traffic logs are generated by policies that have "deny" defined as their action, and will not log any traffic that matches policies configured to "allow". Unlike traditional firewalls that use port or protocol to identify applications, the Palo Alto Networks.

The broadening use of social media, messaging and other non-work related applications introduce a variety of vectors for viruses, spyware, worms and other types of malware. Palo Alto Networks next-generation firewalls allow you to block unwanted applications with App-ID, and then scan allowed applications for malware.