Configure a Basic Application Management PolicyNEW!

You must be in the process of configuring a new Application Management policy or modifying an existing policy to use this procedure.

Use this procedure to configure or modify basic settings for an Application Management policy.

  1. Choose from the following actions:
    • If you are in the process of configuring a new Application Management policy, proceed to the next step.
    • If you want to edit basic settings for an Application Management policy, go to Policies > Application Management. Select adjacent to the target policy. Modify the settings in accordance with the steps in this procedure.

  2. Select the Basic tab.
  3. Enter an Application Policy Description in the range 1–80 characters. Highlight the application and category filters to differentiate this policy from other policies with similar settings.
  4. Choose from the Application Logging options to enable and filter logging for application-specific packet flows. Set the parameters as described in Application Logging Parameters.
    Table 1. Application Logging Parameters
    Parameter Description
    Enable Logging

    Select this option to enable DPI application recognition logging. This feature is by disabled by default.

    DPI is an advanced packet analysis technique, which analyzes packet and packet content headers to determine the nature of network traffic. When enabled, DPI inspects packets of all flows to identify applications (such as, Netflix, Twitter, Facebook) and extract metadata (such as, host name, server name, TCP-RTT) for further use by the ExtremeWireless WiNG firewall.

    Enable Logging Level

    This option invokes logging of application events by severity, and is enabled by default when Enable Logging is enabled. Select a severity level for this Application Management policy. Options include:

    • Notifications (default)
    • Emergency
    • Alert
    • Critical
    • Error
    • Warning
    • Information
    • Debug
  5. Use the Application Policy Enforcement Time table to configure an enforcement time period for this Application Management policy. The enforcement time is applicable only to those rules, within the Application Management policy, that do not have an associated Schedule policy. By default, an Application Management policy is enforced on all days.
    Note

    Note

    Schedule policies are a means of enforcing allow/deny/mark/rate-limit rules at different time periods. If no Schedule policy is applied, all rules within an Application Management policy are enforced at the time specified using this enforcement time command. To configure a Schedule policy for use with this Application Management policy, use the CLI command schedule-policy, then select the policy while performing the procedure Configure Application Policy Rules

    Select Add to populate the table with an enforcement time configuration to activate an Application Management policy based on the current local time. The option to configure an activation period is applicable for a single policy. Configure the time period when the policy is enforced as described in Application Policy Enforcement Time Parameters. If no time enforcement configuration is set, the policy is continually in effect without restriction.

    Table 2. Application Policy Enforcement Time Parameters
    Parameter Description
    Days

    Select the day(s) on which this Application Management policy is to be enforced. Options include:

    • All (default) — Enforces the policy continuously.
    • Weekends — Enforces the policy only on weekends, between the hours and minutes specified.
    • Weekdays — Enforces the policy only on weekdays, between the hours and minutes specified.
    • Monday — Enforces the policy only on Monday, between the hours and minutes specified.
    • Tuesday — Enforces the policy only on Tuesday, between the hours and minutes specified.
    • Wednesday — Enforces the policy only on Wednesday, between the hours and minutes specified.
    • Thursday — Enforces the policy only on Thursday, between the hours and minutes specified.
    • Friday — Enforces the policy only on Friday, between the hours and minutes specified.
    • Sarurday — Enforces the policy only on Sarurday, between the hours and minutes specified.
    Start Time Specify the time of day at which this policy enforcement is to begin. Use the spinner control to set the time using the 24 hr format, where 00.00 represents 24:00 hrs.
    End Time Specify the time of day at which this policy enforcement is to end. Use the spinner control to set the time using the 24 hr format, where 00.00 represents 24:00 hrs.
  6. After you have completed configuring the settings, choose from the following actions:
    1. Select Revert to restore default settings or restore the last saved settings.
      Note

      Note

      You cannot restore default settings after applying or saving changes.
    2. Select Apply to commit the configured settings.
      Note

      Note

      This does not permanently save the settings you configured. If you perform a Reload (warm reboot), applied settings will be lost.
    3. Select Save to commit and save the configured settings.
      Note

      Note

      If you do not select Apply or Save, the settings that you configured are not saved when you move away from the configuration window.