Enable Protocol Signature by default

[User1234]

Hi! (I hope this is the correct board) Concerning Firewalling (Mgmt/GW) I want to enable protocol signatures (AppCtrl) in all services by default, without the need to manually override each service and check the box in the advanced section. Is this possible at all? #Quantum

[_Val_]

Can you elaborate please? What are you trying to achieve?

[User1234]

I am trying to enable AppCtrl on our GWs. This is done by activating the blade activating the protocol signature in the respective services, that are used in the access layer. Unfortunately the protocol signature check is disabled by default in any service and must be activated manually. I want to activate it by default, so any service has the box check automatically.

[_Val_]

I think you misunderstand what Application Control is, and how it is intended to work.

There are services, and there are applications. You can use both in the rulebase. Maybe start with sk112249 and Admin manuals.

[Timothy_Hall]

The R80+ Protocol Signature & Protocol settings on the service objects are the source of a lot of confusion but as Val said is mostly separate from Application Control.  Understanding the ramifications of enabling the Protocol Signature setting beforehand is highly advisable.  This seems to be one area that does not have a lot of documentation, so I took my best shot at trying to explain it in my unpublished "APCL/URLF Immersion" class for a private customer.  Whether I did a good job or not is left as an exercise for the reader, see below.  😀

[User1234]

Thanks for the explanation. So is there a way to enable the protocol signature check by default on any supporting protocols/services/whatever-you-may-name-them?

[Timothy_Hall · Accepted solution]

Doesn't seem to be possible from what I can tell, I poked around in the GUIdbedit objects_5_0.C settings and the $FWDIR/lib/*.def files and didn't see any kind of property setting that controls this behavior.

[_Val_]

Not all services are having those signatures in the first place.