First Packet application detection mechanism

[JChang]

Hi,

As I know the first-packet application detection mechanism is important for identifying applications. Where can I find the detailed flowchat for the first-packet application detection engine of security gateway ?

Best Regards,

Jeremy

[the_rock · Accepted solution]

Do you have an issue with app control or you just need doc about it? Maybe below can help?

Andy

https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_Quantum_SecurityGateway_Guid...

[Chris_Atkinson · Accepted solution]

You will want to explore the concept of "Protocol Signatures" further as related to this.

https://community.checkpoint.com/t5/Management/Enable-Protocol-Signature-by-default/m-p/139285/highl...

https://community.checkpoint.com/t5/General-Topics/Protocol-Signatures/td-p/54945

https://community.checkpoint.com/t5/General-Topics/Protocol-Signatures/td-p/107564

[the_rock]

Thanks for those Chris, very useful.

Andy

[PhoneBoy · Accepted solution]

You might want to have a look at the Web Filtering Best Practices session I just did, which will likely help your understanding.

[the_rock]

Totally super useful!

[the_rock]

Hi Jeremy,

These can also help.

Best,

Andy

*****************************

https://support.checkpoint.com/results/sk/sk163594

https://support.checkpoint.com/results/sk/sk167052

https://support.checkpoint.com/results/sk/sk182812