Amer Networks E5Web GUI User Manual
Page 213

InControl
Follow the same steps used for the Web Interface below.
Web Interface
First, define the Application Rule Set:
1.
Go to: Policies > Firewalling > Application Rule Sets > Add > Application Rule Set
2.
Specify a suitable name for the list, in this case browser_list
3.
Set the Default Action to Allow
4.
Click OK
Next, define an Application Rule in this rule set:
1.
Go to: Policies > Firewalling > Application Rule Sets > browser_list > Add > Application
Rule
2.
Select Allow for the Action
3.
Under Application Filter press Select filter.
4.
In the Search field enter http
5.
Select Matches specific applications
6.
Open the Web node and select http from the list of matching applications
7.
Press the Select button to close the filter dialog
Define an Application Content filter:
1.
Select the Content Control tab
2.
Set User Agent to Allow Selected
3.
In the blank text field type firefox followed by enter and the chrome followed by enter.
4.
Click OK
Lastly, associate this Application Rule Set with the appropriate IP Policy that triggers on the
relevant traffic as shown in an earlier example.
As explained previously, the policy and therefore this rule set will only trigger if no previous rule
has triggered for the same traffic.
Note: String matches are a subset and case insensitive
When specifying string matches for application content control, the matching function
is case insensitive and always a subset function. In the example above, the string firefox
is specified for the user_agent property and this will trigger on any version of Firefox
since the agent field always contains this string.
Chapter 3: Fundamentals
213