OverviewApplication objects are used to define applications that run over the network. Applications are made up of:
- A Network Object
- TCP/UDP ports
- TCP/UDP port ranges
- A layer 3 protocol, or
- A layer 7 signature
ResolutionTo add a new application object simply browse to Objects > Application
In the "Add New Application" box give your application a name, point it to a network object (if applicable), define it using L7 signatures and or protocols
See an example below
This creates an application object for the website vimeo.com. Now anything hitting vimeo.com will be classified under the new application.
In this example, anything with vimeo.com in the URL will be classified under the new application, example: users.vimeo.com, canada.vimeo.com, etc.
Note: For continuous stream of data, the application definition does not take effect immediately. It will depend on when that flow breaks and restarts. Sometimes the Exinda have to be rebooted for the new application definition or change to an existing one, to take effect.
Also note that any specific port, protocol, L7 signature, etc, can only be used in one application at a time. If attempting to add a duplicate, the Exinda will present an error saying that it is already in use. This is in done in order to preserve the ability to correctly classify an application. For example, if TCP port 1111 is used by 2 separate applications set up as objects, the Exinda will not know which one to classify the traffic as. As such, it restricts items to only one application.