Configure Application Visibility Settings

About this task

Deep packet inspection (DPI) is an advanced packet analysis technique, which analyzes packet and packet content headers to determine the nature of network traffic. When DPI is enabled, packets of all flows are subjected to DPI to get accurate results. DPI identifies applications (such as, Netflix, Twitter, Facebook, etc.) and extracts metadata (such as, host name, server name, TCP-RTT, etc.) for further use by the WiNG firewall.

Legacy WiNG APs and service platforms, running WiNG 7.2.1 OS, use a third-party DPI engine to enforce Application Visibility and Control (AVC) within the managed network. Whereas, 802.11ax AP5xx model APs, use Purview™ libDPI engine. Use this screen to set AVC settings for the WiNG AP profiles.

Note

Configure Application Visibility settings on legacy WiNG, 802.11ac APs, running WiNG 7.2.1 OS. These APs are: AP7502, AP7522, AP7532, AP7562, AP8612, AP8632, AP8662, AP8432, AP8533.

Note

Confiugre Purview Application Visibility settings on 802.11ax APs, running WiNG 7.2.1 OS. These APs are AP505i, AP510i/e, AP560i/h. Refer to the WiNG 7.2.1 CLI Reference guide for information on Purview Application policy and group.

To configure a profile‘s application visibility settings and overrides:

Procedure

Go to Configuration → Profiles → Manage Profiles tab from the Web UI.
Expand Security and select Application Visibility.
The Application Visibility and Control Settings window displays.

Refer the following Application Visibility and Control settings:


Enable dpi	Enable this setting to provide deep-packet inspection. When enabled, network flows are inspected at a granular level to identify applications (such as, Netflix, Twitter, Facebook, etc.) and extract metadata (such as, host name, server name, TCP-RTT, etc.) for further use by the WiNG firewall.
Enable Applications Logging	Select this option to enable event logging for DPI application recognition. This setting is disabled by default.
Applications Logging Level	If enabling DPI application recognition event logging, set the logging level. Severity levels include Emergency, Alert, Critical, Errors, Warning, Notice, Info, and Debug. The default logging level is Notification.
Enable Voice/Video Metadata	Select this option to enable the metadata extraction from voice and video classified flows. The default setting is disabled.
Enable HTTP Metadata	Select this option to enable extraction of metadata from HTTP application data flows. The default setting is disabled.
Enable SSL Metadata	Select this option to enable extraction of metadata from SSL application data flows. The default setting is disabled.
Enable TCP RTT	Select this option to enable extraction of RTT information from TCP flows. The default setting is disabled.

Review the Custom Applications for DPI field to select the custom applications available for this device profile.
For information on creating custom applications and their categories, see Create a Custom Application Definition.
To enable TCP-RTT metadata collection on legacy WiNG AP and service platform profiles use the App Groups for TCP RTT field to specify the application groups for which TCP-RTT metadata collection is to be enabled.
Select the Application Groups from the drop-down menu and use the green, down arrow to move the selection to the box below. You can add a maximum of eight groups to the list.
If the desired application group is not available, select the Create icon to define a new application group configuration or select the Edit icon to modify an existing application group. For information on creating Application groups, see Create a Custom Application Definition.
Click OK to save the changes or overrides.
Click Reset to revert to the last saved configuration.