If the default Application Control 2.0 pattern database does not include an application that you want to use in your application rules, you can create a custom application object. Select a template for an existing application and configure it to match the application that you want to drop, throttle, prioritize, or report.
Create a Custom Application Object
- Open the Forwarding Rules page (Config > Full Config > Virtual Servers > your virtual server > Assigned Services > Firewall).
- In the left menu, expand Firewall Objects and select Applications.
- Click Lock.
- Create the custom application by either right-clicking the table and selecting New > Custom Application or using the icons in the top-right area of the rule set.
- Select an application to customize and click OK.
- You can customize the following settings for the application:
- Name – The name of the application.
- Comment – Additional information about the application.
- Category – The category of the application.
- Risk – The risk level of the application, from 1 (low) to 4 (high).
- Properties – The properties of the application.
- Application Name – If you want to customize specific components of the application, add the component names. To get the name of a component, go to the Firewall > Monitor page, click the application, and see the Deep Application Control window in the Application Statistics section. Examples:
- Facebook – Use the canvas name of the FB application: https://apps.facebook.com/<canvasname>.
- SSL – Create matching criteria based on X.509 certificate content.
- Web browsing – Create matching criteria based on URL host (www.acme.com) or URL path (/images?/)
Click Save.
The following figure displays the process for creating a custom application.
