• Tìm kiếm

Application awareness in Kerio Control

  • 7,000
  • Tác giả: admin
  • Ngày đăng: 08:10 12/12/2024
  • Lượt xem: 7
  • Tình trạng: Còn hàng

Application awarenessA part of next generation firewall which allows you to lớn identify and filter traffic according to lớn particular applications. has two parts:

  • Application control
  • Application visibility

Application control allows Kerio Control to lớn recognize thousands of applications in the Kerio Control network. You can then:

  • Reserve or limit bandwidth for certain applications
  • Allow, deny, or block traffic from or to lớn those applications

Application visibility allows you to lớn review used applications in Kerio Control Statistics and Active Connections.

The application awareness is available under the Kerio Control Web Filter license. For details, read Changes in licensing.

The new application awareness means that the behavior of nội dung filtering and bandwidth management in Kerio Control changes. Rules may become more strict and can be applied to lớn more applications or connections that they match.

To phối up and use application awareness, you first enable application awareness in Kerio Control. Then you can select and use applications in the Content Filter and Bandwidth Management rules.

Enabling application awareness

Application awareness does not work in combination with Kerio Control non-transparent proxy server enabled.

  1. In the administration interface, go to lớn Content Filter.
  2. Click the Applications and Web Categories tab, and select Enable application awareness.
  3. Click Apply.

Setting nội dung rules

Example: Social networks

Whenever Kerio Control processes a rule that includes applications and trang web categories, application awareness is activated. This example shows how to lớn phối up a rule that denies all users access to lớn social networks.

  1. In the administration interface, go to lớn Content Filter.
  2. Click the Content Rules tab, and click Add.
  3. In the table, type a name for the rule.
  4. Double-click in the Detected content column.
  5. In the Content Rule - Detected Content dialog box, click Applications and Web Categories.

  1. In the Applications and Web Categories dialog box, select Social Networking.

  1. Click OK twice.
  2. Do not change the Source column.
  3. Double-click in the Action column.
  4. In the Content Rule - Action dialog box, select Deny.

  1. Type a deny text that appears to lớn users in their browsers when the rule is matched.
  2. Click OK.
  3. Click Apply.

From now on, Kerio Control refuses all attempts to lớn use social truyền thông lượt thích Facebook or Twitter.

Example: YouTube, Twitter and Skype

If you don't want to lớn be as strict as in the Example: Social networks rule, forbid access only:

  • To a group of users
  • To YouTube, Twitter, and Skype
  • During working hours

To configure such rule:

  1. In the administration interface, go to lớn Content Filter.
  2. Click the Content Rules tab, and click Add.
  3. In the table, type a name for the rule, for example, YouTube, Twitter and Skype.
  4. Double-click the Detected content column.
  5. In the Content Rule - Detected Content dialog box, click Applications and Web Categories.

  1. In the Applications and Web Categories dialog box, find and select all items which include YouTube, Twitter, and Skype.

  1. Click OK twice.
  2. Double-click the Source column.
  3. In the Content Rule - Source dialog box, select Users and Groups.
  4. In the Select Items dialog box, select a group you want to lớn restrict from using YouTube, Twitter, and Skype. For details, see Creating user groups in Kerio Control.
  5. Click OK twice.
  6. Double-click the Action column.
  7. In the Content Rule - Action dialog box, select Deny.

  1. Type a deny text that appears to lớn users in their browsers when the rule is matched.
  2. Click OK.
  3. Double-click the Valid Time column.
  4. In the drop down list, select a time range. For details, see Creating time ranges in Kerio Control.
  5. Click Apply.

From now on, Kerio Control refuses all attempts to lớn use YouTube, Twitter and Skype during working hours.

Setting bandwidth rules

Example: Limiting music access

Whenever Kerio Control processes a rule that includes applications and trang web categories, application awareness is activated. This example describes how to lớn phối up a rule limiting access to lớn music for all users:

  1. In the administration interface, go to lớn Bandwidth Management and QoSQuality of service - Network's ability to lớn obtain maximum bandwidth and manage other network performance elements lượt thích latency, error rate and uptime..
  2. Click Add.
  3. In the table, type a name for the rule.
  4. Double-click in the Traffic column.
  5. In the Traffic dialog box, click Applications and Web Categories.

  1. In the Applications and Web Categories dialog box, under Entertainment / Culture, select Music.

  1. Click OK twice.
  2. In the Download column, limit the bandwidth. In our example, the Ethernet line is limited to lớn 400 KB/s for music.
  3. Click Apply.

After applying the rule, Kerio Control limits all users who listen to lớn music with applications lượt thích Spotify or Internet radiostations.

Application visibility in Active Connections

In the Active Connections section, you can see all applications detected on active connections:

  1. In the administration interface, go to lớn Status > Active Connections.

  1. Right-click the column header.
  2. In the context thực đơn, click Columns.
  3. Select Info.

From now on, the Info column displays applications detected by the application awareness.

Debugging application awareness

To lập cập logging for the application awareness:

  1. In the administration interface, go to lớn Logs > Debug.
  2. Right-click in the log window.
  3. In the context thực đơn, select Messages.
  4. In the Logging Messages window, select:
  • Application awareness
  • Intrusion Prevention System
  • General protocol inspection messages
  1. Click OK.

From now on, the log is running.

If you have all necessary data gathered, unselect all three log options. Logging too much information slows Kerio Control's performance.

Changes in licensing

NOTE

This section is for users upgrading from previous versions to lớn Kerio Control 9.1.

If you have existing rules based on the following trang web categories, you need a Kerio Control Web Filter license.

  • Peer-to-PeerA distributed application architecture that partitions tasks or workloads between peers.
  • Streaming và Downloadable Audio
  • Streaming và Downloadable Video
  • Email
  • Internet Phone và VOIP
  • ICQ/AIM
  • IRC
  • Jabber
  • MSN
  • Yahoo
  • IPsecInternet Protocol security - A network protocol used to lớn encrypt and secure data sent over a network.
  • Kerio VPNVirtual private network - A network that enables users connect securely to lớn a private network over the Internet.
  • L2TPLayer 2 Tunneling Protocol - A tunneling protocol used with IPsec.
  • Open VPN
  • PPTPPoint-to-Point Tunneling Protocol - A phối of communication rules that allows to lớn extend corporate network through private tunnels over public Internet.
  • RDP
  • SSHSecure Shell - A cryptographic network protocol that enables you to lớn connect securely over an unsecured network.
  • Telnet
  • VNC