Application Content Control With Logging - D-Link NetDefendOS User Manual

6. Open the Web node and select http from the list of matching applications
7. Press the Select button to close the filter dialog
Define an Application Content filter:
1. Select the Content Control tab
2. Set User Agent to Allow Selected
3. In the blank text field type firefox followed by enter and the chrome followed by enter.
4. Click OK
Lastly, associate this Application Rule Set with the appropriate IP Policy that triggers on the
relevant traffic as shown in an earlier example.
As explained previously, the policy and therefore this rule set will only trigger if no previous rule
has triggered for the same traffic.
Note: String matches are a subset and case insensitive
When specifying string matches for application content control, the matching function
is case insensitive and always a subset function. In the example above, the string firefox
is specified for the user_agent property and this will trigger on any version of Firefox
since the agent field always contains this string.
Extended Logging
When using application content control, it is possible to enable logging for different content.
This means that special log messages will be generated by NetDefendOS when the rule triggers
on a configured piece of content.
For example, if the user_agent in application content has logging enabled and the Allow Selected
string is set to firefox, this will allow the Firefox browser to be used and also generate a log
message to indicate that Firefox caused the rule to trigger. The string firefox will be included in
the log message.
The log messages generated by extended logging in application control will always be one of
the following events:
• application_content_allowed
• application_content_denied
• application_content
(The action was Ignore but logging is Yes.)
Example 3.42. Application Content Control with Logging
This example shows how access to Facebook™ can be allowed but the Facebook chat function
disallowed using application content control. A log event will also be generated every time a
260
Chapter 3: Fundamentals