This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Understanding Application Control

From the 8.200 release notes "Application Control uses precise patterns to
identify which applications are being used on the network, regardless of the port or protocol they use to communicate".

As I understand this no matter what is the port or the protocol the application control must identify the applications right? Does this mean that if someone uses ultrasurf to access facebook the application control can detect it?? or if I configured Skype to use the tor proxy can the application control detect it too?

BTW I cannot find the team viewer and ultrasurf in the applications.

Thanks

This thread was automatically locked due to age.

0 Scott_Klassen over 14 years ago

In each of the scenarios that you've laid out above, the traffic would be within an encrypted tunnel, so no it wouldn't be able to detect the traffic. You would first need to block Tor and Ultrasurf (there is a definition for Tor now, but not Ultrasurf).

BTW I cannot find the team viewer and ultrasurf in the applications.
https://community.sophos.com/products/unified-threat-management/astaroorg/f/55/t/45202

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 techuser over 14 years ago

Thanks that's what I thought, so what do they mean by detecting the application no matter what is the port or protocol??
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 14 years ago

Many of the definitions use behavioral analysis to determine the application, even if the default port is changed.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel