SonicOS 7.0 Security Services Administration Guide

Download PDF
Technical Documentation > SonicOS 7.0 Security Services Administration Guide > Configuring App Control > Configuring App Control Signatures > Configuring App Control Signatures by Category

Configuring App Control Signatures by Category

Category-based configuration is the most broadly based method of policy configuration on the POLICY | Rules and Policies > App Control > Signatures page. The list of categories is available in the Category drop-down menu.

To configure an App Control policy for an application category

  1. Navigate to the POLICY | Rules and Policies > App Control > Signatures page.
  2. Select an application category from the Category drop-down menu. The Configure icon to the right of the field is enabled as soon as a category is selected.

  3. Click Configure to display the App Control Category Settings dialog for the selected category.

  4. To block applications in this category, select Enable in the Block drop-down menu.
  5. To create a log entry when applications in this category are detected, select Enable in the Log drop-down menu.
  6. To target the selected block or log actions to a specific user or group of users, select a user group or individual user from the Included Users/Groups drop-down menu. Select All to apply the policy to all users.
  7. To exclude a specific user or group of users from the selected block or log actions, select a user group or individual user from the Excluded Users/Groups drop-down menu. Select None to apply the policy to all users.
  8. To target the selected block or log actions to a specific IP address or address range, select an Address Group or Address Object from the Included IP Address Range drop-down menu. Select All to apply the policy to all IP addresses.
  9. To exclude a specific IP address or address range from the selected block or log actions, select an Address Group or Address Object from the Excluded IP Address Range drop-down menu. Select None to apply the policy to all IP addresses.

  10. To enable this policy during specific days of the week and hours of the day, select one of the following schedules from the Schedule drop-down menu:

    Schedule Options
    This schedule Enables the policy
    Always on At all times. This option is selected by default.
    Work Hours Monday through Friday, 8:00 AM to 5:00 PM.
    M-T-W-T-F 08:00 to 17:00 Monday through Friday, 8:00 AM to 5:00 PM (same as Work Hours).
    After Hours Monday through Friday, 5:00 PM to 8:00 AM.
    M-T-W-T-F 00:00 to 08:00 Monday through Friday, midnight to 8:00 AM.
    M-T-W-T-F 17:00 to 24:00 Monday through Friday, 5:00 PM to midnight.
    SU-S 00:00 to 24:00 24 hours a day, Sunday through Saturday (same as Always On).
    Weekend Hours Friday at 5:00 PM through Monday at 8:00 AM.
    AppFlow Report Hours During the time configured for AppFlow reports.
    SU-M-T-W-TH-F-S 00:00 to 24:00

    24 hours a day, Sunday through Saturday (same as Always On).
    TSR Report Hours During the time configured for TSR reports.

  11. By default, the Use Global Settings option is selected and has a default of 60 seconds, which cannot be changed (the field is dimmed). To specify a different delay between log entries for repetitive events:

    1. Deselect the Use Global Settings checkbox. The field becomes available.
    2. Enter the number of seconds for the delay into the Log Redundancy Filter field. The minimum number of seconds is 0 (no delay), the maximum is 999999, and the default is 0.
  12. Click OK.

Was This Article Helpful?

Help us to improve our support portal

Yes! Not Really

Techdocs Article Helpful form

  • Hidden
  • Hidden

Techdocs Article NOT Helpful form

  • Still can't find what you're looking for? Try our knowledge base or ask our community for more help.
  • Hidden
  • Hidden