Use application-based connection objects to select the WAN connection based on the application. Add application-based link polices for each application or application category. Each policy can use a different connection object. Traffic that does not match one of these policies is sent using the default connection object.
Before you Begin
- (optional) Create custom connection objects for each Internet connection.
Step 1. Create the Application Based Connection Object
- Go to FIREWALL > Connection Object
- In the APPLICATION BASED CONNECTION OBJECTS section, click Add Connection Object.
- Enter a Name.
- Select the Default Connection.
- Click Save.
Step 2. Add Application Based Link Policies
Edit the application-based connection object you just created and add the application-based link policies. Applications can be added individually, through the application browser, or by application category. All selected applications will use the connection object selected for this policy.
- Stay on the FIREWALL > Connection Object page.
- Click to edit the application-based connection object you created in Step 1.
- Click Add. The Add Application Based Link Policy pop-over opens.
- Select the connection object from the Connection dropdown.
- Add applications to the links policy by name, application browser and/or category:
- Start typing the application name in the Select applications textbox and then click on the application from the list.
- Click Browse to select the applications in the application browser.
- Select the application categories from the Categories list.
- Start typing the application name in the Select applications textbox and then click on the application from the list.
- Click Save.
The application-based link policy is now listed in the in the application-based connection object.
Step 3. Edit the Access Rule to use the Application Based Connection Object
- Go to FIREWALL > Firewall Rules.
- Double-click on the access rule you want to use the Application Based Connection Object. The Edit Access Rule pop-over opens. E.g., LAN-2-INTERNET
- Select the application-based connection object created in Step 1 from the Connection dropdown.
- Click Save.
To check which outgoing interface is used for a connection, go to BASIC > Active Connections or BASIC > Recent Connections and check the SNAT column.