topic Re: User Defined Application Control Code? in General Topics

User Defined Application Control Code?

HeikoAnkenbrand — Thu, 03 Sep 2020 14:52:29 GMT

Is it possible to create user defined code for the application control blade?

I would like to build a rule for my own application created by a customer, which blocks this application to the internet.

For example, the following string is included in the html code "app-tuning-db". Now I would like to create a user defined application, which recognizes exactly this string in html stream. If my own application is recognized, it should be blocked by the application control blade in the direction of the internet.

Now my question:

Can I create user defined applicationons?

If so, where can I find informations?

Important!
I will not use the DLP blade!

Regards
Heiko

Re: User Defined Application Control Code?

Danny — Thu, 03 Sep 2020 15:24:49 GMT

The only thing that comes to my mind is the Signature Tool for custom Applications (Admin Guide) together with the R80 import function.

Re: User Defined Application Control Code?

G_W_Albrecht — Thu, 03 Sep 2020 15:30:49 GMT

How about creating a snort rule and let IPS block the communication ?

Re: User Defined Application Control Code?

HeikoAnkenbrand — Fri, 04 Sep 2020 05:58:32 GMT

Hi @Danny,

Thanks, that is exactly what I was looking for!

Re: User Defined Application Control Code?

Aaron_Rose — Tue, 08 Sep 2020 13:51:51 GMT

I used this to create a custom signature that would display a UserCheck interaction to outdated Chrome, IE, Firefox & Safari browsers. It would present them with a notice that their browser was out of date & missing critical security updates. The UserCheck also included links to download & install the latest version of their browser. It worked liked a charm! Good luck!