Application signature describe the characteristic features of certain network applications. They are used in the firewall to analyze traffic at OSI Layer 7 for the purposes of intrusion detection and prevention. Application signatures are created by UserGate developers and added to the system automatically when the correspondent license is present. You can create custom signatures and add them to the application library.
To create a custom application signature, go to Libraries ➜ Application signatures and click Add. After that, specify the signature properties and describe its characteristic features using the UASL syntax. Fill in the following fields:
Name |
Description |
---|---|
Type |
Signature type:
|
Id |
Signature group ID. |
Name |
The name of the signature. |
Description |
Signature description. |
Threat level |
Threat level defined by the signature. The following values are defined:
|
Technology |
Application technology:
|
Category |
A signature category is a group of signatures that have common parameters. The list of categories can be extended.
|
UASL |
Description of the signature's features using the UASL syntax. |