User Guide

OmniAccess SafeGuard OS Administration Guide
310
Chapter 7: Establishing a Security Policy
For an additional example of network zones, see Network Zones Example on page 321.
Application Group
Application groups are collections of application protocols used to filter Layer 7
applications in rules. Either define custom application groups or use one of the
predefined supplied groups:
■ application-group IM
— application AOLIM
— application MSNIM
— application YAHOOIM
■ application-group NetworkConnectivity
— application CIFS
— application FTP
— application SSH
— application TELNET
■ application-group P2P
— application WINNY
■ application-group Web
— application ALT-HTTP
— application HTTP
To create or delete a custom application group, use the
application-group Global
Configuration command:
application-group group_name
This example create a custom IM group called verbotenIM:
(SafeGuardOS) #configure terminal
(SafeGuardOS) (config) #application-group verbotenIM
(SafeGuardOS) (app-group) #
The application-group command places you in app-group mode. In this mode, define the
custom group using any combination of application protocol found in the default groups.
application application_name
This example adds three application protocols to verbotenIM:
(SafeGuardOS) (config) # application-group verbotenIM
(SafeGuardOS) (app-group) # application AOLIM