topic Re: Application grouping question. in General Topics

Application grouping question.

dagibbs — Wed, 22 Dec 2010 01:08:50 GMT

hi.

I'm sure the answer to this is going to be simple, but for he life of me I can;t figure it out without testing it live, which would lead to some rather, erm, loud consequences if I get it wrong. 🙂

I have a "deny by default, allow only specified' policy in place for Internet traffic.

I allow traffic by having an application grouop - call it "Good Stuff" which lists allowable applications to go outbound.

I want to allow an defined application which has sub-applications defined, but I only want to allow SOME of the sub applications.

Do I allow

1) The top-level application and the sub-applications I want

2) Only the sub-applications I want?

I guess I'm asking if allowing the top-level (parent) application automatically allows the sub-applications, or do I have to specifically allow the sub-applications as well?

Hope this is not too muddled.

Cheers.

Re: Application grouping question.

reaper — Wed, 22 Dec 2010 12:36:42 GMT

are you referring to a top app like "facebook" with some sub-apps 'facebook-base -chat -etc"?

in this scenario "facebook" is a container on itself, so if you only want to allow certain parts of the whole package you would want to select the subcategories that you want to allow and block or ommit the other sub-apps

regards

Re: Application grouping question.

dagibbs — Wed, 22 Dec 2010 23:12:29 GMT

tpiens wrote:
Hi
are you referring to a top app like "facebook" with some sub-apps 'facebook-base -chat -etc"?
in this scenario "facebook" is a container on itself, so if you only want to allow certain parts of the whole package you would want to select the subcategories that you want to allow and block or ommit the other sub-apps
regards

Yes, I was referring to something like Facebook - actually, I was looking at LinkedIn, but the concept is the same.

So what heppens if I just select "Facebook" (or "LinkedIn") on its own? Does this automatically include the subcategories, or do I still need to select them?

Cheers.