Concept Guide

Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Deep Packet Inspection and Application Visibility | 260
Chapter 18
Deep Packet Inspection and Application Visibility
This chapter provides the following information:
l Deep Packet Inspection on page 260
l Enabling Application Visibility on page 260
l Application Visibility on page 261
l Configuring ACL Rules for Application and Application Categories on page 266
l Configuring Web Policy Enforcement Service on page 269
Deep Packet Inspection
AppRF is Dell's custom built Layer 7 firewall capability. It consists of an on-board deep packet inspection and a
cloud-based Web Policy Enforcement service that allows creating firewall policies based on types of application.
The web policy enforcement capabilities require the W-IAP to have a web policy enforcement subscription. For
more information on subscription, contact the Dell Sales Team.
W-IAPs with DPI capability analyze data packets to identify applications in use and allow you to create access
rules to determine client access to applications, application categories, web categories and website URLs based
on security ratings. You can also define traffic shaping policies such as bandwidth control and QoS per
application for client roles. For example, you can block bandwidth monopolizing applications on a guest role
within an enterprise.
The AppRF feature provides application visibility for analyzing client traffic flow. W-IAPs support both the
power of in-device packet flow identification and dynamically updated cloud-based web categorization.
To view the graphs, set the AppRF visibility option in the System window to Enabled. For more information
on DPI ACLs and AppRF visibility, see the following topics:
l Enabling Application Visibility on page 260
l Application Visibility on page 261
l Configuring ACL Rules for Application and Application Categories on page 266
l Configuring Web Policy Enforcement Service on page 269
Enabling Application Visibility
Enabling AppRF visibility allows you to view the AppRF statistics for a W-IAP or the clients associated with a W-
IAP. When visibility is enabled, the AppRF link appears on the dashboard area of the main window. On clicking
this link, you can view the client traffic flow based on the enforcements.
You can enable AppRF visibility through the Instant UI or CLI:
In the Instant UI
1. Navigate to System>General.
2. Select Enabled from the AppRF visibility drop-down.
3. Click OK.
In the CLI
To enable AppRF visibility: