On the Forwarding Firewall - Rules page, you can view and configure the application rule set. You can also view the list of application and URL filter objects that can be used in application rules.
In this article:
Application Rule Set
In the Application Rules section of the Forwarding Firewall - Rules page, you can view and edit the application rule set. It lists all of the application rules that have been created. After adding a new application rule, you can directly edit specific rules. For more information, see Firewall Access Rules
The following figure displays the application rule set.
In the rule set, information and settings for each rule is organized into the following columns:
| Column | Description |
|---|---|
| Name | The name of the application rule. |
| Application | The applications and sub-applications that are affected by the rule. You can either statically assign specific applications or use an application object. Barracuda Networks recommends that you use Application Object or Application Filter instead of linking static applications to firewall rules. |
| Content | The types of multimedia content that are affected by the rule. You can choose to globally block Flash, AVI, MPEG, QuickTime, and RealMedia content in websites. |
| URL Filter Match | The URL Filter Match policy that are affected by the rule. You can either statically assign specific URL filters or use an existing URL filter match object. Barracuda Networks recommends that you use URL Filter Match Objects instead of linking static URL Filter Match policies to firewall rules. |
| URL Filter Policy | The URL Filter Policy that are affected by the rule. You can either statically assign specific URL Policies or use an existing URL Filter Policy object. Barracuda Networks recommends that you use URL Filter Policy Object instead of linking static URL Filter policies to firewall rules. |
| Protocol | The protocols that are affected by the rule. With protocols, traffic can be controlled without having to match criteria like source or destination network. For example, you can select protocols to globally detect IPsec or SMTP network traffic and apply QoS policies to prioritize business critical network communications without needing to know the origin or target. |
| User | The users and user groups who are affected by the rule. |
| Schedule | The times during which the rule can be applied. |
| QoS | The traffic shaping settings that are used by the rule. For more information, see Traffic Shaping and How to Create and Apply QoS Bands. |
| Action | The action that is performed when the application is accessed by the user (Deny or Pass). |
| Source | The source network address of the traffic that is affected by the rule. Because the source network is already evaluated in the Access Rule set, you can either use Any or enter specific IP addresses. |
| Destination | The destination network address of the traffic that is affected by the rule. Because the destination network is already evaluated in the Access Rule set, you can either use Any or enter specific IP addresses. |
| Comment | Optional. Additional information about the application rule. |
| IPS Policy | The Intrusion Prevention System (IPS) policy that is enforced by the rule. For more information on IPS, see Intrusion Prevention System (IPS). |
| Usage | Optional. Additional information about the application rule. |
| TI-Settings | The Traffic Intelligence (TI) settings. For more information, see Traffic Intelligence. |
Application Objects List
In the Applications section of the Forwarding Firewall - Rules page, you can view, create, and edit the applications and application objects that are used in application rules. Applications are organized into the following categories:
- Application Object – Lists any application objects that you have created. An application object is a reusable combination of predefined applications, custom applications, and other applications objects. Application objects help simplify the configuration of application rules. For more information, see How to Create an Application Object.
- Protocol Object – Lists any protocol objects that you have created. A protocol object is a reusable combination of predefined protocols. For more information, see How to Create a Protocol Object.
- Custom Application – Lists any custom applications that you have created. If the default Application Control 2.0 pattern database does not cover an application that you want to use in your application rules, you can customize an application. For more information, see How to Create a Custom Application Object.
- Application Overrides – Lists any applications whose risk levels you have changed. For more information, see How to Override the Risk Classification of an Application.
- Applications – Lists predefined applications from the Application Control 2.0 database.
The following figure displays the Applications section.
The following information is provided for each application and application object:
- Name – The name of the application including the icon of the service/application.
- Ref by – The reference to which application object the selection points. This is applied when an application filter is created. Note that referenced objects cannot be deleted.
- Description – A description of the application including type and features.
- Comment – General information about the application.
URL Filter Objects List
In the URL Filter section of the Forwarding Firewall - Rules page, you can view, create, and edit URL filter objects that are used in application rules.
The following information is provided for each URL filter object:
- Name – The name of the URL filter object.
- Ref by – The reference to which URL filter object the selection points. Note that referenced objects cannot be deleted.
- Description – A description of the URL filter object, including type and features.
- Comment – General information about the URL filter object.