Fortinet Gate 60D, Руководство администратора

Страница: 526 / 706

Adding or configuring an application control list entry Application Control
FortiGate Version 4.0 Administration Guide
526 01-400-89802-20090424
http://docs.fortinet.com/ • Feedback
Adding or configuring an application control list entry
To add a new application control list entry or edit an existing one, go to UTM > Application
Control > Control list , and select the Edit icon for the list you want to modify. To add a new
entry, select Create New . To edit an existing entry, select the Edit icon if the entry you want
to modify.
Figure 348: The application control list entry for FTP.
ID A unique number used primarily when re-ordering application entries.
Category The category indicates the scope of the applications included in the
application entry if
Application is set to all . For example, if Application
is all and Category is toolbar , then all the toolbar applications are
included in the application entry even though they are not specified
individually.
If
Application is a single application, the value in Category has no
effect on the operation of the application entry.
Application The FortiGate unit will examine network traffic for the listed
application. If
Application is all , every application in the selected
category is included.
Action If the FortiGate unit detects traffic from the specified application, the
selected action will be taken.
Logging If traffic from the specified application is detected, the FortiGate unit
will log the occurrence and the action taken.
Delete icon Select to delete the application entry.
Edit icon Select to edit the application entry.
Insert Application Before
icon Select to create a new application entry above the entry in which you
selected the icon.
Move To icon Select to move the application entry to a different position in the list.
Category The applications are categorized by type. If you want to choose an IM
application, for example, select the
im category, and the application
list will show only the im applications.
The Category selection can also be used to specify an entire category
of applications. To select all IM applications for example, select the im
category, and select all as the application. This specifies all the IM
applications with a single application control list entry.
Application The FortiGate unit will examine network traffic for the listed
application. If
Application is all , every application in the selected
category is included.
Action If the FortiGate unit detects traffic from the specified application, the
selected action will be taken.
Options