Here’s another setting that I see get overlooked. I don’t think some engineers know what it means.
When working with APP-ID’s, you need to look for the “Depends on:” section. Here Palo Alto lists what this APP-ID depends on to work properly. So it’s a list of other applications that are REQUIRED for this application to work correctly. If you don’t allow the application and its dependencies through the firewall, then the application will NOT work.