[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

Example: Adding a Custom Policy Application

Applications are types of traffic for which protocol standards exist. When you create a policy, you must specify a application for it.

Before You Begin
Establish basic connectivity. (See the Getting Started Guide for your device.) Create addresses. See Configuring a Policy to Permit Traffic. Create zones. See Creating Security Zones. For background information, read: Understanding Custom Policy Applications Security Policy Applications

To add a custom application to the application book, you need the following information:

A name for the application: in this example, cust-telnet.
A range of source port numbers: 1—65535.
A range of destination port numbers to receive the application request: for example: 23000—23000.
Whether the application uses TCP or UDP protocol, or some other protocol as defined by the Internet specifications.

To add a custom application to the application book, use either J-Web or the CLI configuration editor. In this example, the protocol is TCP.

This topic covers:

J-Web Configuration

To add a custom application to application book using the J-Web configuration editor:

Select Configure>CLI Tools>Point and Click CLI.
Next to Applications, click Configure or Edit.
Next to Application, click Add new entry.
In the Application name box, type cust-telnet.
From the Protocol list, select tcp.
From the Source port list, select Enter specific value.
In the Range box, type 1—65535.
From the Destination port list, select Enter specific value.
In the Range box, type 23000—23000 and click OK.
In the Inactivity-timeout box, type 30 and click OK.
If you are finished configuring the device, commit the configuration.

CLI Configuration

In this example, the protocol is TCP.


            
               user@host# set applications application cust-telnet
                     protocol tcp source-port 1-65535 destination-port 23000-23000
               user@host# set applications application cust-telnet
                     inactivity-timeout 30

If you are finished configuring the device, commit the configuration.

Note: The timeout value is in minutes. If you do not set it, the timeout value of a custom application is 180 minutes. If you do not want an application to time out, type never.

Example: Adding a Custom Policy Application

J-Web Configuration

CLI Configuration

Related Topics