Hello All,
I am switching from Aruba to Alta and was looking at setting for applications block. Usually Aruba would have like malicious or malware but didn’t see it in Alta. I was wondering if it was category under cybersecurity?
Thank You
I did post a few days back trying to get some clarity of what is including in these application groups as I have failed to find a list - hopefully someone will respond soon.
No, it is not. Cybersecurity would cover services from Norton, Fortinet, etc., so that wouldn’t help in your case.
It is more likely than not that we will add some sort of malware filtering in the future, but given the scope of that category it would never technically replace something that is done in a proper IDS/IPS solution.
Here is a command you can issue by shell to check the rules:
iptables -t mangle -L ndpi-filter -n -v
Do note that some Application Groups will just return the group name, but others will return an actual list of the applications that are blocked.
Sorry we hadn’t responded yet. I will add this info there for completeness-sake.
Thanks MikeD, I appreciate the quick response. I have a firewall already so was just wondering since there wasn’t documentation on it. Thanks again!
1 Like
No problem! Oh, also, welcome to the community! My bad for not mentioning that earlier.
We will get a knowledge base article up in the future both with how to check that rules are provisioned, and describing the various groups.
Thank you @Alta-MikeD - much appreciated.