Overriding Application Visibility Settings

Deep packet inspection (DPI) is an advanced packet filtering technique functioning at the application layer. Use DPI to find, identify, classify, reroute or block packets containing specific data or codes that other packet filtering techniques (examining only packet headers) cannot detect.

Enable DPI to scan data packets passing through the WiNG managed network. The contents of each packet are scanned, occasionally logged and blocked or routed to their destination. Deep packet inspection helps an ISP block the spread of viruses, illegal downloads and prioritize data transmitted by bandwidth-heavy applications (video and VoIP applications) to help prevent network congestion.

Note

Application Visibility is available only on AP 7562, AP 8432, and AP 8533 access points.

To configure a profile‘s application visibility settings and overrides:

1. Select Configuration > Devices > Device Overrides from the web UI.
2. Select Security.
3. Select Application Visibility.
4. Refer the following Application Visibility and Control Settings:

   Enable dpi	Enable this setting to provide deep-packet inspection (application assurance) by inspecting every byte of each application header packet passing through the controller or service platform. When enabled, application data streams are inspected at a granular level to help prevent viruses and spyware from accessing the WiNG managed network.
   Enable Applications Logging	Select this option to enable event logging for DPI application recognition. This setting is disabled by default.
   Applications Logging Level	If enabling DPI application recognition event logging, set the logging level. Severity levels include Emergency, Alert, Critical, Errors, Warning, Notice, Info, and Debug. The default logging level is Notification.
   Enable Voice/Video Metadata	Select this option to enable extraction of metadata from high bandwidth voice and video application data flows. The default setting is disabled.
   Enable HTTP Metadata	Select this option to enable extraction of metadata from HTTP application data flows. The default setting is disabled.
   Enable SSL Metadata	Select this option to enable extraction of metadata from SSL application data flows. The default setting is disabled.

5. Review the Custom Applications for DPI field to select the custom applications available for this device profile.
   For information on creating custom applications and their categories, see “Application.”
6. Click OK to save the changes or overrides.
   Click Reset to revert to the last saved configuration.