Filter
Top Products
Application Control
627
SonicOS 5.8.1 Administrator Guide
Figure 49:12Packet Monitor - Monitor Filter Tab
To set up mirroring, go to the Mirror tab and pick an interface to which to send the mirrored
traffic in the Mirror filtered packets to Interface (NSA platforms only) field under Local
Mirroring Settings. You can also configure one of the Remote settings. This allows you to mirror
the application packets to another computer and store everything on the hard disk. For
example, you could capture everyone’s MSN Instant Messenger traffic and read the
conversations.
See the “Configuring Packet Monitor” section on page 99 for more information about Packet
Monitor configuration.
Create Rule from App Flow Monitor
The Dashboard > App Flow Monitor page provides a Create Rule button. If, while viewing the
App Flow Monitor, you see an application that seems suspicious or is using excessive amounts
of bandwidth, you can simply select the application in the list, then click Create Rule and
configure an App Control policy for it immediately. You can also select multiple applications and
then use Create Rule to configure a policy that applies to all of them.
Note General applications cannot be selected. Service type applications and signature type
applications cannot be mixed in a single rule.