飞塔应用控制文档

nbsp;                                           例如：检测非标准端口的HTTP协议

                                                                              通过模式匹配技术检测应用
                                             应用控制                              检测通过Http通道偷偷使用某些P2P应用（Skype, IM)
                                                                              对应用进行细粒度的控制

                                                                               动作包括阻断、通过、流量整形和用户控制
                                               Course 201 v4.3
                                                                               可以阻断FTP特定的PUT命令
                                                                               可以阻断IM的文件传输
                                                                               可以检测IM用户传送恶意的文件
                                                                               可以对IM消息进行归档

                                                                              按端口、协议和应用产生灵活的报告方式

                                                                              应用列表可以在FortiGuard Center上查到

应用控制的技术基础                                                                  数据包的处理过程

   IPS Scan 技术                                                               IPS异常、IPS特征和应用
        通用的engine 和signatures                                                 控制流量检查

        Many supported in 3.0 (ex: P2P)

>