Security Services
Configuring Application Control
Cisco ISA500 Series Integrated Security Appliances Administration Guide
265
7
•
Logging:
Choose
Enable
to log the event when an application is blocked, or
choose
Disable
to disable the logging feature. If the logging settings vary
among the applications in a category, you must first choose the
keep
application-level settings
option, and then configure the logging settings
for each application in the category. See
Permitting or Blocking Traffic for
To log application blocking events, you must enable the logging settings for
the applications, and then go to the Device Management > Logs
pages to
configure the log settings and the log facilities. See
-
To save application blocking logs to the local syslog daemon, you must
enable the Log feature, set the log buffer size and the severity for local
logs, and enable the Local Log settings for the Application Control facility.
-
To save application blocking logs to the remote syslog server if you have
a remote syslog server support, you must enable the Log feature, specify
the Remote Log settings, and enable the Remote Log settings for the
Application Control facility.
NOTE:
Changing the category default settings will override the
application-level settings for all applications in the category.
STEP 3
Click
OK
to save your settings.
Permitting or Blocking Traffic for an Application
If the action, schedule, or logging settings vary among the applications in a
category, you can configure the action and logging settings for each application in
the category. The application-level settings are applied to a single application in a
category.
NOTE
To edit the settings for an application with detection disabled, you must first enable
the detection from the Advanced Settings page.
NOTE
Before you configure the application-level settings for each application in a
category, make sure that you choose
keep application-level settings
for the
Action and Logging options of the category.
STEP 1
Click the
Edit
(pencil) icon in the
Configure
column for an application.
The Policy Profile - Add/Edit window opens.
STEP 2
Specify the application-level control settings:
