We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

This Firmware Version Is End-Of-Support

Documentation for this product is no longer updated. Please see https://campus.barracuda.com/doc/71862301/ for further information on our EoS policy.

How to Use Layer 7 Application Control in Firewall Rules

  • Last updated on

Layer 7 Application Control is a legacy feature of the Barracuda NG Firewall. Barracuda Networks recommends using Application Control 2.0 instead.

After enabling Layer 7 Application Control, you can configure it in your firewall rules. You can choose to use the default application detection and handling policies or configure policies that are specific to the rule.

To use Layer 7 Application Control, you must have a valid Energize Updates subscription installed on the Barracuda NG Firewall.

You must also enable Layer 7 Application Control before using it in your firewall rules. For more information, see How to Enable Layer 7 Application Profiling.

Configure Application Detection

  1. Go to CONFIGURATION > Configuration Tree > Box > Virtual Servers > your virtual server > Assigned Services > Firewall > Forwarding Rules.
  2. Double-click the required firewall rule.
  3. From the Views menu in the left navigation pane, select Application Control.
  4. From the Application Detection list, select an application handling policy:
    • NONE – Application detection is deactivated. 
    • Use Default Policy – Uses the default application detection policy as configured on the General Firewall Configuration page.
    • Detect Only – Reports detected applications in the firewall access cache but takes no action.
    • Limit Bandwidth – Limits the bandwidth for the traffic of detected applications.
    • Drop Traffic – Blocks the traffic for detected applications.
    • Assign QoS-Tree – Assigns a Quality of Service tree to the traffic. See Traffic Shaping to learn more about Quality of Service profiles.
  5. From the Application Selection list, select an application detection policy:
    • Use Default Protocol Selection – Uses the default application detection policy as configured on the General Firewall Configuration page.
    • Explicitly Select Protocols – Lets you explicitly select which applications must be detected by the Barracuda NG Firewall. From the Explicit Application Selection list, double-click the required applications.

      The Protocols column represents all available protocols. To select an application, double-click it. The Selected Protocols column represents the currently selected protocols that will be detected.


  6. Click OK.
  7. Click Send Changes and Activate.
Last updated on