A rule entry can classify the query or response from applications:
Link Local Mulitcast Name Resolution (LLMNR) – This protocol is based on the Domain Name System (DNS) packet format. It allows hosts to perform name resolution for hosts on the same local link. LLMNR is defined in RFC 4795.
Simple Service Discovery Protocol (SSDP) – SSDP is a Universal Plug-and-Play (UPnP) based protocol. SSDP uses the NOTIFY and MSEARCH HTTP methods to discover and advertise services on the network.
Multicast Domain Name System - Service Discovery (MDNS-SD) – DNS-SD is a service discovery protocol that utilizes the Domain Name System. Multicast DNS is a protocol that is mostly compatible with normal DNS, but uses link local multicast addressing, allowing for zeroconf functionality. MDNS-SD is primarily used with the Bonjour protocol.
Use the application classification rule attribute to create a policy application rule entry specifying the application and whether the classification is based upon query or announce for the data.