Quantum SPARK 1500 - Managing Applications & Urls

Managing Applications & URLs
R81.10.X Quantum Spark 1500, 1600, 1800, 1900, 2000 Appliances Locally Managed Administration Guide|390
Managing Applications & URLs
In the Users & Objects > Applications & URLs page you can define application groups,
custom applications, and view the full list of available applications. You can then use them in
the access policy together with the applications and URLs that are in the Application
Database. A custom application group lets you define multiple categories and/or sites to use in
the access policy Rule Base.
To configure the access policy, click the applications default policy link or click the
Applications Blade Control page link.
For more information about all built in applications and categories, click the Check Point
AppWiki link at the top of the page.
Note - When URL Filtering is selected in the Access Policy > Firewall Blade Control
page, rules containing URLs and custom applications are enforced.
What is a custom application?
Most applications are browser based. A custom application can be defined using a string or
regular expression search on URLs.
What is a category?
Each URL is inspected by the Check Point Cloud using the URL Filtering and can be matched
to one or more built in categories (for example, phishing sites, high bandwidth, gambling, or
shopping, etc.).
The Application and Categories List
A list of applications and categories is shown according to a filter that is shown above the list.
There are 4 filters:
n
Common - Commonly used applications, custom applications, and categories.
n
Custom - Only custom applications.
n
Categories - Only categories.
n
All
A tag icon is shown next to categories and dedicated application icons are shown next to
applications.
In the Application Database, each application is assigned to one primary category based on its
most defining aspect. It also has additional categories which are characteristics of the
application. For example, Pinterest - its primary category is social networking and its additional
categories are share photos and SSL protocol. If a category is in a rule, the rule matches all
applications that are marked with the category.
If new applications are added to an additional category that is in the access policy Rule Base,
the rule is updated automatically when the database is updated.