Enhanced Private Application Discovery

Overview 

Application Discovery helps in discovering, identifying, and mapping the private applications in an organization’s network to control user accessibility. It ensures that only authorized users can access specific applications configured based on work interests and location.                                                          

Significance 

Admins can enable application discovery to help Skyhigh Private Access identify applications when you request access, using specific domain names and IP subnets. Configuring an application segment for discovery helps understand and access the various applications used within the organization. 

Key Benefits

When private applications are added using a wildcard or subnets, it exposes many internal apps that users can access instead of just single applications.

To simplify the process of discovering and adding private apps to the private applications, the discovered apps module is configured so that applications can be added to the private apps list in Private Access Configuration (PAC) or a list of discovered apps can be published as private apps.

Configuring Application Discovery

Application discovery is most productive when the TCP and UDP port ranges for the subdomains (wildcard) or IP subnets are broad, and the application policy allows access to many users. When you request an application that matches the subdomains (wildcard) or subnets, the Skyhigh Secure App Connector on the device redirects the request to the appropriate App Connectors. Depending on whether the request uses a domain name or an IP address, the App Connectors either perform a DNS lookup or check IP reachability. If the request is successful, you gain access to the application, and it appears in the Discovered Applications widget.

Configure Segments for Application Discovery

A segment in application discovery refers to a specific subdomain (wildcard) or subnet configuration used to isolate and manage private applications within a network. It helps with security by limiting access to sensitive resources while enabling efficient discovery and communication within the organization.

Subdomains (wildcard) entries or specific subnets that define the range of IP addresses or network segments are added to this segment. These subdomains (wildcard) or subnets serve as filters, ensuring that any discovered private applications originating from these addresses or ranges are excluded from the list, refining the results to focus only on the relevant applications.