Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

Blocking Applications and Users

 

You can block applications and users based on network access policies, users and their job roles, and time. The blocking feature offers application control to organizations to accelerate business-critical applications, stagger non-critical applications, and block undesirable applications.

Blocking applications or users requires policy rules to be edited. View policy changes by clicking the policy name or view affected devices by clicking the device count. You see only policies permitting this traffic in the past 30 days.

Note

Starting in Junos Space Security Director Release 21.1, when unified policy rules permit the traffic, selecting block action creates block rules in the appropriate unified policy.

You can block users and applications from the Application Visibility page.

To block an application:

  1. Select Monitor > Applications. The Application Visibility page appears.
  2. In Chart view, hover over the application that you want to block.

    The application page appears with information on the number of sessions, bandwidth, number of blocks, risk level, category, characteristics, top five users, view all users link, and options to block applications and users.

    Note

    You see the number of sessions as links. When you click a link, the All Events page appears and displays the events that generated those sessions.

    Click the View All Users link to display the User Visibility page in Grid view with the correct filter applied.

    Note

    In Grid view, select an application and click Block Application.

    The Block page appears with the application name and the top five users of the application.

  3. Click Block Application to block users from accessing the selected application.

    The Block Application page appears with the policies that contain the rules required to block the application. The listed policies will be edited to block all users from accessing the selected application.

  4. Click a policy to preview the policy details.

    The Policy Changes Preview page appears with information on the number of rules added, modified, and deleted. You can preview the policy details. You can attach or add a schedule under the Rule options column.

  5. Click OK.
  6. Click Save to save your changes.
  7. Click Publish to publish your policies.
  8. Click Update to update your policies on devices.

To block a user:

  1. Select Monitor > Applications. The Application Visibility page appears.
  2. In Chart view, hover over the application that you want to block.

    The application page appears with information on number of sessions, bandwidth, number of blocks, risk level, category, characteristics, top five users, view all users link, and options to block applications and users.

    Note

    You see the number of sessions as links. When you click a link, the All Events page appears and displays the events that generated those sessions.

    When you click View All Users link, the User Visibility page in Grid view appears with the correct filter applied.

    Note

    In Grid view, select an application and click Block Application. The Block page appears with top five users.

  3. Select a user you want to block and click Block User(s).

    The Block Users page appears with policies that contain the rules required to block the user from accessing the selected application.

  4. Click a policy to preview the policy changes.

    Starting in Junos Space Security Director 16.1, you can preview the policy details. The Policy Changes Preview page appears with information on the number of rules added, modified, and deleted. You can preview the policy details. You can attach or add a schedule under the Rule options column.

  5. Click OK.
  6. Click Save to save your changes.
  7. Click Publish to publish your policies.
  8. Click Update to update your policies on devices.
Release History Table
Release
Description
Starting in Junos Space Security Director 16.1, you can preview the policy details. The Policy Changes Preview page appears with information on the number of rules added, modified, and deleted.