Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

Add Application Signatures

 

You are here: Configure > Security Services > App Secure > App Signatures.

To add an application signature:

  1. Click the add icon (+) on the upper right side of the Application Signatures page.

    The Create Application Signatures page appears.

  2. Complete the configuration according to the guidelines provided in Table 1.
  3. Click OK to save the changes. If you want to discard your changes, click Cancel.

Table 1: Fields on the Add Application Signatures Page

Field

Action

Name

Enter the application signature name.

Description

Enter the application signature description.

Order

Enter the order of the custom application.

Lower order has higher priority.

The range is 1 through 50,000.

Priority

Enter the priority over other signature applications.

Select an option from the list:

  • High

  • Low

Risk

Enter the risk as critical, high, moderate, low, or unsafe.

Application Identification match criteria

Select one or more options from the list:

  • ICMP Mapping

  • IP Protocol Mapping

  • Address Mapping

  • L7 Signature

ICMP Mapping

Select a value from the list.

  • ICMP Type—Select the numeric value of an ICMP type. The type identifies the ICMP message, such as Unassigned or Destination Unreachable.

    The range is from 0 through 254.

  • Select the numeric value of an ICMP code. The code field provides further information (such as RFCs) about the associated type field.

    The range is from 0 through 254.

IP Protocol Mapping

Select the numeric value of an ICMP type. The type identifies the ICMP message, such as Unassigned or Destination Unreachable.

The range is from 0 through 254.

Address Mapping

To add a new address mapping:

  1. Click Add.

    The Add Address Mapping page appears.

    Enter the following details:

    • Name—Enter the name of the address mapping.

    • IP Address—Enter an IPv4 or IPv6 address.

    • CIDR Range—Enter an IPv4 or IPV6 address prefix for classless IP addressing.

    • TCP Port range—Enter the TCP port range for the application.

    • UDP Port Range—Enter the UDP port range for the application.

  2. Click the pencil icon at the top right side of the Address Mapping table. Then, edit the address mapping and click OK.

  3. To delete an existing Address Mapping, select it and click the delete icon or right-click on it and click Delete.

L7 Signature

To add a L7 Signature:

  1. Click Add L7 Signature.

    The Add L7 Signature page appears with the following options.

    • Over HTTP

    • Over SSL

    • Over TCP

    • Over UDP

  2. Click the pencil icon at the top right side of the L7 Signature table. Then, edit the address mapping and click OK.

  3. To delete an existing L7 Signature, select it and click the delete icon or right-click on it and click Delete.