Creating Application Filters
- Gary Leicht
- Alex Mandel
- Shirly Tsang
IMPORTANT NOTES:
If you are creating an application filter to be used with Local On-Prem Resolution, then you must add Allow - Local Resolution as the default action to your security policy. Application filters are available to subscribers of Infoblox Threat Defense Business Cloud and Infoblox Threat Defense Advanced. For more information on how to add an action to a security policy, see Adding Policy Rules and Setting Precedence.
When an application filter is configured with Allow Local Resolution in a policy, the DFP associated with that policy must be set to use an internal resolver. This ensures that domains are resolved locally using the configured internal resolvers of the DFP.
Reporting Incorrect Data: To report incorrect data, submit the Dossier Threat Research Feedback from. For information, see Dossier Threat Research Feedback.
To create an application filter, complete the following:
From the Infoblox Portal, click Configure > Security > Policies.
On the Security Policies page, click the Filters tab located above the top Action bar.
On the Filters page, click Create Filter on the top Action bar.
From among the options displayed (Create Category Filter or Create App Filter), click Create App Filter.
On the Create Application Filter page, complete the following:
Name: Enter a name for the content application filter. Ensure that you use a unique name for each filter. This is a required field.
Description: Enter a brief description of the filter. You can enter up to 256 characters.
From the applications list, APPLICATIONS, expand the AVAILABLE list by clicking on the respective arrow next to the application type. Within each application category, sub categories are listed. You can add an entire application category or select among the subcategories to include in your application filtering policy.
From the AVAILABLE list select the checkboxes of the specific sub-applications you want to include in the rule, and then use the arrows to move the selected subcategories from the AVAILABLE list to the SELECTED list. You can include as many applications and sub-applications as you want based on your needs.
To remove a sub-application from the SELECTED list, click the X located to the right of the sub-application's name.
Click Save & Close to save or Cancel to cancel the configuration. Infoblox Cloud adds the application filter to the list. You can now add the application filter to a security policy or to multiple policies. For more information, see Configuring Security Policies.
NOTE: You cannot remove an existing application filter if it has been added and assigned an action in any security policies.
Application category filter/subcategory filter types include:
Application Categories | Application Subcategories |
|---|---|
Business App Suite | 163 Cloud |
Generative AI | AI Companions |
163 Email | |
Cloud Backup and Storage | 1fichier Cloud |
Communication
| 8x8 |
Content Delivery Network (CDN) | Akamai CDN |
Other | AddThis |
Platform as a Service (PaaS)
| ACM |
Software Development
| Apache Software Foundation |
Business App
| Attendant Pro |
Security
| BitDefender |
Video Conferencing | Blue Jeans |
Information Technology
| Bright Sign |
Consumer Services
| Amazon Shopping |
Remote Connectivity
| code4ward |
Endpoint Protection
| ePO |
VPNs & Proxies
| express_vpn |
Social Networking
| Facebook |
Search Engines
| Bing |
Vulnerability Scanner | Nessus |