Hello guys.
One of my biggest expectation in Copernicus, it was the "New Application control engine". So, yesterday, I started my tests with this feature.
So far, I have to say that I'm sort of disappointed...
Perhaps I'm doing something wrong...
1. When I'm creating a new app control group, the application list takes a very freak long time to be ready for selection. And sometimes even when the app list is ready, I just can't select any application. I mean, I click in the check box at left of the app name, but nothing happen. So I have to cancel the configuration and restart everything again, and wait a long time again...
2. I realized that I must activate https scan to be able to filter application like facebook, gmail, etc... So, to avoid the certificate errors in the users computers, I tried to install my own certificate (which is already recognized by the computers in my network as a trust CA), but when I try to import my certificate do Copernicus under "Objects / Identity / Certificate Authority -> Add", I always got a message saying that My CA is corrupted. But it is not corrupted. So I had to import the appliance CA in my computers...
3. Even enabling the https scan in my policies, some application are not being blocked. Eg. I have created a app group where I didn't block Gmail. But I blocked Gmail Attachments and Gtalk. But I still able to chat using Gtalk and also send and receive attachments by email using Gmail. Same behaviour with Facebook. I do not block Facebook Website, but I block facebook messages... but even so Facebook messages still working.
Does anyone else having problems with Application Control?
All the best,