Browsing the Application Control Database
In the CLI, the command appcontrol can be used to examine the application control database of
application definitions. Without any parameters, this command shows the database size. For
example:
gw-world:/> appcontrol
Application library contents:
842 application definitions.
34 families.
4 tags.
If tab completion is used after the command, all the definition families are displayed. For
example:
gw-world:/> appcontrol <tab>
antivirus/
application_service/ forum/
audio_video/
authentication/
compression/
database/
encrypted/
erp/
file_server/
These families consist of the individual definitions. For example, to view the two definitions in
the compression family, use the command:
gw-world:/> appcontrol compression
compression - Compression:
ccp
comp
2 application(s)
To view a single definition, the individual name can be used without the family. For example, to
display the comp definition within the compression family:
gw-world:/> appcontrol comp
comp - Compression
COMP protocol is used for data compression over PPP.
Family:
Compression
Risk Level:
1 - Very low risk
Tags:
Revision:
0
Enabled:
Yes
The Tags and Risk Level add further information to each definition but are not part of the
definition híerarchy. The Risk Level indicates the degree of threat that this particular application
poses. The Tags provide more information about the data traffic related to the application, for
example High Bandwidth might be a typical tag.
It is possible to search the definition database by using any of the filter parameters:
•
name
•
family
•
name
•
risk
•
tag
file_transfer/
game/
instant_messaging/ printer/
mail/
messenger/
microsoft_office/
middleware/
music_player/
262
Chapter 3: Fundamentals
network_management/ thin_client/
network_service/
peer_to_peer/
qosmos/
routing/
security_service/
telephony/
terminal/
tunneling/
unclassified/
wap/
web/
webmail/