Application grouping question.

[dagibbs]

hi.

I'm sure the answer to this is going to be simple, but for he life of me I can;t figure it out without testing it live, which would lead to some rather, erm, loud consequences if I get it wrong. 🙂

I have a "deny by default, allow only specified' policy in place for Internet traffic.

I allow traffic by having an application grouop - call it "Good Stuff" which lists allowable applications to go outbound.

I want to allow an defined application which has sub-applications defined, but I only want to allow SOME of the sub applications.

Do I allow

1) The top-level application and the sub-applications I want

or

2) Only the sub-applications I want?

I guess I'm asking if allowing the top-level (parent) application automatically allows the sub-applications, or do I have to specifically allow the sub-applications as well?

Hope this is not too muddled.

Cheers.

[reaper]

Hi

are you referring to a top app like "facebook" with some sub-apps 'facebook-base -chat -etc"?

in this scenario "facebook" is a container on itself, so if you only want to allow certain parts of the whole package you would want to select the subcategories that you want to allow and block or ommit the other sub-apps

regards

[dagibbs]

tpiens wrote:
Hi
are you referring to a top app like "facebook" with some sub-apps 'facebook-base -chat -etc"?
in this scenario "facebook" is a container on itself, so if you only want to allow certain parts of the whole package you would want to select the subcategories that you want to allow and block or ommit the other sub-apps
regards

Yes, I was referring to something like Facebook - actually, I was looking at LinkedIn, but the concept is the same.

So what heppens if I just select "Facebook" (or "LinkedIn") on its own? Does this automatically include the subcategories, or do I still need to select them?

Cheers.