Configuring Global Custom Application Settings
To configure global application settings in the J-Web user interface:
- Click Configure>Security>Policy Elements>Applications.
- Select the Custom-Applications tab.
- Select one of the following options:
- Add–To create a new application, click Add. The Add an Application dialog box appears.
- Edit–To edit an existing configuration, select the application that you want to change and click Edit. The Edit an Application dialog box appears.
- Delete–To delete an existing configuration, select it and click Delete. (If you select this option, you can skip the remaining steps in this section.)
- Select the Global tab.
- In the Application name field, specify a name for the custom application.
- In the Application-protocol field, specify the application protocol. For a complete list of options, see Table 55.
- In the Match IP protocol field, specify the network protocol. For a complete list of options, see Table 56.
- In the Destination Port field, specify the destination port identifier. You can use a numeric value or one of the text synonyms listed in Table 57.
- In the Source Port field, specify the source port identifier. You can use a numeric value or one of the text synonyms listed in Table 57.
- In the Inactivity-timeout field, specify the length of time (in seconds) that the application is inactive before it times out.
- In the RPC-program-number field, specify the remote procedure call (RPC) value. Valid values range from 0 to 65535.
- In the Match ICMP message code field, specify the Internet Control Message Protocol (ICMP) code value, such as host-unreachable or host-unreachable-for-tos.
- In the Match ICMP message type field, specify the ICMP packet type value, such as echo or echo-reply.
- In the UUID field, specify a universal unique identifier (UUID). A UUID is a 128-bit unique number generated from a hardware address, a timestamp, and seed values.
- In the Application-Set field, select the application set to which this application should belong.
- Select one of the following options:
- OK–To apply the configuration and return to the main Configuration page, click OK.
- Cancel–To cancel your entries and return to the main page, click Cancel.
Table 55: Custom Application Protocols
Protocol | Description |
---|---|
dns | Domain Name Service |
ftp | File Transfer Protocol |
ignore | Ignore application type |
mgcp-ca | Media Gateway Control Protocol with Call Agent |
mgcp-ua | MGCP with User Agent |
ms-rpc | Microsoft RPC |
pptp | Point-to-Point Tunneling Protocol |
q931 | ISDN connection control protocol (Q.931) |
ras | Remote Access Service |
realaudio | RealAudio |
rsh | UNIX remote shell services |
rtsp | Real-Time Streaming Protocol |
sccp | Skinny Client Control Protocol |
sip | Session Initiation Protocol |
sqlnet-v2 | Oracle SQLNET v2 |
sun-rpc | Sun Microsystems RPC |
talk | TALK program |
tftp | Trivial File Transfer Protocol |
Table 56: Match IP Protocols
Protocol | Description |
---|---|
ah | IP Security Authentication Header |
egp | Exterior gateway protocol |
esp | IPsec Encapsulating Security Payload |
gre | Generic routing encapsulation |
icmp | Internet Control Message Protocol |
igmp | Internet Group Management Protocol |
ipip | IP over IP |
ospf | Open Shortest Path First |
pim | Protocol Independent Multicast |
rsvp | Resource Reservation Protocol |
sctp | Stream Control Transmission Protocol |
tcp | Transmission Control Protocol |
udp | User Datagram Protocol |
Table 57: Port Names
Port Name | Port Number |
---|---|
afs | 1483 |
bgp | 179 |
biff | 512 |
bootpc | 68 |
bootps | 67 |
cmd | 514 |
cvspserver | 2401 |
dhcp | 67 |
domain | 53 |
eklogin | 2105 |
ekshell | 2106 |
exec | 512 |
finger | 79 |
ftp | 21 |
ftp-data | 20 |
http | 80 |
https | 443 |
ident | 113 |
imap | 143 |
kerberos-sec | 88 |
klogin | 543 |
kpasswd | 761 |
krb-prop | 754 |
krbupdate | 760 |
kshell | 544 |
ldap | 389 |
ldp | 646 |
login | 513 |
mobileip-agent | 434 |
mobilip-mn | 435 |
msdp | 639 |
netbios-dgm | 138 |
netbios-ns | 137 |
netbios-ssn | 139 |
nfsd | 2049 |
nntp | 119 |
ntalk | 518 |
ntp | 123 |
pop3 | 110 |
pptp | 1723 |
printer | 515 |
radacct | 1813 |
radius | 1812 |
rip | 520 |
rkinit | 2108 |
smtp | 25 |
snmp | 161 |
snmp-trap | 162 |
snpp | 444 |
socks | 1080 |
ssh | 22 |
sunrpc | 111 |
syslog | 514 |
tacacs | 49 |
tacacs-ds | 65 |
talk | 517 |
telnet | 23 |
tftp | 69 |
timed | 525 |
who | 513 |
xdmcp | 177 |