3.8. ApplicationRuleSet

Home Prev	cOS Core 14.00.18 CLI Reference Guide	Next

Description

An Application Rule Set contains a list of Application Rules and some settings and can be used by one or more IP rules/IP Policies to configure Application Control on the traffic matching those IP Rules/IP Policies.

Properties

Name: Specifies a symbolic name for the Profile. (Identifier)
DefaultAction: Default action if nothing in the rule list matches. (Default: Deny)
UseCustomLimits: Use custom limits for unclassified traffic in this ruleset instead of the default limits specified in the advanced settings. (Default: No)
MaxUnclassifiedPackets: Maximum number of packets in one direction on a connection before the application will be forced to unknown. (Default: 5)
MaxUnclassifiedBytes: Maximum number of bytes transfered in one direction on a connection before the application will be forced to unknown. (Default: 7500)
StrictHTTP: Handle plain http more strictly to avoid leaking generic http services when only specific http services should be allowed. (Default: Yes)
Attribute: Special Attribute of the current object. (Optional)
Comments: Text describing the current object. (Optional)

3.8.1. ApplicationRule

Description

An application rule specifies what action to perform on applications that matches the specified filter criteria.

Properties

Name: Specifies a symbolic name for the Profile.
Action: Action for matched application. (Default: Allow)
AppFilter: Application filter.
ApplicationContent: Extended logging and policy for application attributes. (Default: [])
UserAuthGroups: Groups and user names that belong to this object. (Optional)
ForwardChain: Specifies one or more pipes to be used for forward traffic. (Optional)
ReturnChain: Specifies one or more pipes to be used for return traffic. (Optional)
Precedence: Specifies what precedence should be assigned to the packets before sent into a pipe. (Default: FromPipe)
FixedPrecedence: Specifies the fixed precedence.
Attribute: Special Attribute of the current object. (Optional)
Comments: Text describing the current object. (Optional)

	Note
	If no `Index` is specified when creating an instance of this type, the object will be placed last in the list and the `Index` will be equal to the length of the list.