Skip to main content

App Control

The module implements in-depth traffic analysis (Deep Packet Inspection - DPI) to reveal protocols of popular apps (layer-7 filtering).

App control works only in the Enterprise edition for users with active subscription to updates and technical support, as well as in SafeDNS SMB edition with the purchased module. The list of compatible network adapters with which this model works for certain can be seen in Installation Process section.
The Intrusion Prevention, Application Control, and Rate Limiting rules do not handle traffic between LANs and branch networks.

See article Blocking Popular Resources to find out how to block remote access software, anonymizers, torrents and other popular resources.

The status of the module can be viewed by clicking on the checkmark icon at the top of the screen next to Application Control:

image-1661391479937.png

How the rule set works:

SafeUTM analyzes traffic and looks for a rule that matches this traffic from the list and applies it. If there are several rules in the list with the same conditions ("Applied to" and "Protocols" columns) but different actions (Action column), then the one with the higher priority will be applied.

Creating Rules

Rules are configured in Access Rules -> App Control.

To create a new rule, follow these steps:

1. Click Add in the left upper corner of the screen.

image-1661391533496.png

2. Specify the following parameters:

  • Name – type in the rule name for convenience of administration. Maximum 42 characters.
  • Apply for – you can select objects of the following types: user, user group, IP address, IP address range, subnet, list of IP addresses or a special object Quota Exceeded (users who exceed traffic quota fall in this object).
  • Protocols – select (app) layer-7 protocol(s) from the list.
  • Action – allow or deny the selected protocol.

3. Click Save.