Ruckus Wireless ZoneDirector 1200, Руководство пользователя

Страница: 117 / 361

Figure 74: Application Port Mapping
Well- Known Service and Destination Port Mappings Defined in Application
Visibility
ZoneDirector automatically identifies many of the most common applications for use in
application recognition and filtering policies. The following links provide lists of some
common applications and ports that are included:
• IANA list of Service Names and Port Numbers
• SpeedGuide.net
• Well known TCP and UDP ports used by Apple software products
• Bitcoin
• Google Cloud Messaging
• PlayStation
• TiVo
• Wii
• Xbox
Configure Application Policies
This option allows the administrator to create policies to deny application access, to set
QoS traffic shaping priorities for certain traffic types, or to enforce rate limiting policies
for applications.
Application Denial Policies
Using application denial policies, administrators can block specific applications if they
are seen to be consuming excessive network resources, or enforce network usage
policies such as blocking social media sites.
The following usage guidelines need to be taken into consideration when defining
Application Denial Policies:
• "www.corporate.com": This will block access to the host web server at the
organization "corporate.com", i.e. the FQDN. It will not block access to any other
hosts such as ftp, ntp, smtp, etc. at the organization "corporate.com".
• "corporate.com": This will block access to all hosts at the domain "corporate.com"
i.e. it will block access to www.corporate.com, ftp.corporate.com,
smtp.corporate.com, etc.
• "corporate": This will block access to any FQDN containing the text "corporate" in
any part of the FQDN. Care should be taken to use as long as possible string for
matching to prevent inadvertently blocking sites that may contain a shorter string
match i.e. if the rule is "net" then this will block access to any sites that have the text
"net" in any part of the FQDN or ".net" as the FQDN suffix.
• *.corporate.com: This is an invalid rule. Wildcard "*" and other regular expressions
cannot be used in any part of the FQDN.
117 Ruckus Wireless ZoneDirector™ Release 10.0 User Guide
Configuring Security and Other Services
Controlling Network Access Permissions