Add Application Signatures
You are here: Configure > Security Services > App Secure > App Signatures.
To add an application signature:
- Click the add icon (+) on the upper right side
of the Application Signatures page.
The Create Application Signatures page appears.
- Complete the configuration according to the guidelines
provided in Table 1.
- Click OK to save the changes. If you want to
discard your changes, click Cancel.
Table 1: Fields
on the Add Application Signatures Page
Field | Action |
|---|
Name | Enter the application signature name. |
Description | Enter the application signature description. |
Order | Enter the order of the custom application. Lower order has higher priority. The range is 1 through 50,000. |
Priority | Enter the priority over other signature applications. Select an option from the list: |
Risk | Enter the risk as critical, high, moderate, low, or unsafe. |
Application Identification match criteria | Select one or more options from the list: ICMP Mapping IP Protocol Mapping Address Mapping L7 Signature
|
ICMP Mapping | Select a value from the list. ICMP Type—Select the numeric value of an ICMP type.
The type identifies the ICMP message, such as Unassigned or Destination
Unreachable. The range is from 0 through 254. Select the numeric value of an ICMP code. The code field
provides further information (such as RFCs) about the associated type
field. The range is from 0 through 254.
|
IP Protocol Mapping | Select the numeric value of an ICMP type. The type identifies
the ICMP message, such as Unassigned or Destination Unreachable. The range is from 0 through 254. |
Address Mapping | To add a new address mapping: Click Add. The Add Address Mapping page appears. Enter the following details: Name—Enter the name of the address mapping. IP Address—Enter an IPv4 or IPv6 address. CIDR Range—Enter an IPv4 or IPV6 address prefix
for classless IP addressing. TCP Port range—Enter the TCP port range for the
application. UDP Port Range—Enter the UDP port range for the
application.
Click the pencil icon at the top right side of the Address
Mapping table. Then, edit the address mapping and click OK. To delete an existing Address Mapping, select it and
click the delete icon or right-click on it and click Delete.
|
L7 Signature | To add a L7 Signature: Click Add L7 Signature. The Add L7 Signature page appears with the following options. Over HTTP Over SSL Over TCP Over UDP
Click the pencil icon at the top right side of the L7
Signature table. Then, edit the address mapping and click OK. To delete an existing L7 Signature, select it and click
the delete icon or right-click on it and click Delete.
|
