Fortinet black logo

New Features

Application Control Profile GUI Improvements

Copy Link
Copy Doc ID 761d83e3-4a7b-11e9-94bf-00505692583a:306018
Download PDF

Application Control Profile GUI Improvements

This version adds multiple GUI enhancements to the Application Control Profile including:

  • A right-sided pane in the sensor page to display FortiGuard help links.
  • Individual application overrides and filter overrides tables are combined into one override table. The two types are combined when adding a new override.
  • Override entries in the table display sequence numbers and can be reordered by dragging and dropping.

Specific application overrides and filter overrides tables are combined into one override table, where signature and filter entries are mixed together. A right-sided gutter has been added to sensor page to display FortiGuard help links.

For specific applications, parent/child application structures are removed.

Override entries in the table display sequence numbers that can be reordered by dragging and dropping.

Entries in the Application and Filter Overrides table can be reordered by dragging the priority number to the desired position. The priority number and the selected entries are reordered.

In the Application and Filter Overrides section, the pane to add and edit overrides entries has two tabs: Application and Filter.

For each entry in the override table, you can only configure one type: for Application or Filter option.

Type

Select Application for application override.

Select Filter for filter override.

Action

No change from previous version.

Can be set to Monitor/Allow/Block/Quarantine.

Application

Available if you select Application Type.

Use the pane to add one or more application signatures for an entry. Use the search box to filter signatures.

Filter

Available if you select Filter Type.

You can select filters by behavior/application category/technology/popularity/protocol/risk/vendor subtypes. Filters can be accumulated to filter a set of signatures that match all selected filters.

The Search box can be use to find if input signature is included in selected filters, where matched applications are shown at the bottom.

To create a new Application Control Profile with the Application Type:
  1. In Security Profiles > Application Control in the Application and Filter Overrides section, click Create New.
  2. For Type, select Application. For Action, select Block.
  3. For Application, click +.

    All application signatures are listed.

  4. In the Search box, enter Facebook and select Facebook.

  5. Click OK to apply this entry.
  6. Click Create New to create another entry.
  7. For Type, select Filter. For Action, select Block.
  8. For Filter, click +.
  9. In the Select Entries list under BEHAVIOR, select Cloud.

    All matching signatures are listed.

  10. Click OK to apply this entry.

    The Application and Filter Overrides section shows two entries.

  11. Drag the second entry to the top, and click OK to save this profile.

Application Control Profile GUI Improvements

This version adds multiple GUI enhancements to the Application Control Profile including:

  • A right-sided pane in the sensor page to display FortiGuard help links.
  • Individual application overrides and filter overrides tables are combined into one override table. The two types are combined when adding a new override.
  • Override entries in the table display sequence numbers and can be reordered by dragging and dropping.

Specific application overrides and filter overrides tables are combined into one override table, where signature and filter entries are mixed together. A right-sided gutter has been added to sensor page to display FortiGuard help links.

For specific applications, parent/child application structures are removed.

Override entries in the table display sequence numbers that can be reordered by dragging and dropping.

Entries in the Application and Filter Overrides table can be reordered by dragging the priority number to the desired position. The priority number and the selected entries are reordered.

In the Application and Filter Overrides section, the pane to add and edit overrides entries has two tabs: Application and Filter.

For each entry in the override table, you can only configure one type: for Application or Filter option.

Type

Select Application for application override.

Select Filter for filter override.

Action

No change from previous version.

Can be set to Monitor/Allow/Block/Quarantine.

Application

Available if you select Application Type.

Use the pane to add one or more application signatures for an entry. Use the search box to filter signatures.

Filter

Available if you select Filter Type.

You can select filters by behavior/application category/technology/popularity/protocol/risk/vendor subtypes. Filters can be accumulated to filter a set of signatures that match all selected filters.

The Search box can be use to find if input signature is included in selected filters, where matched applications are shown at the bottom.

To create a new Application Control Profile with the Application Type:
  1. In Security Profiles > Application Control in the Application and Filter Overrides section, click Create New.
  2. For Type, select Application. For Action, select Block.
  3. For Application, click +.

    All application signatures are listed.

  4. In the Search box, enter Facebook and select Facebook.

  5. Click OK to apply this entry.
  6. Click Create New to create another entry.
  7. For Type, select Filter. For Action, select Block.
  8. For Filter, click +.
  9. In the Select Entries list under BEHAVIOR, select Cloud.

    All matching signatures are listed.

  10. Click OK to apply this entry.

    The Application and Filter Overrides section shows two entries.

  11. Drag the second entry to the top, and click OK to save this profile.