The application definitions for layer-7 detection and layer-7 application control are located in a central table for DNS-based applications (layer-7 app) in LANconfig under
(CLI: ).- Name
-
The name for the destination. The name is used to reference this object.
There can be multiple entries for a name by appending the name of the destination with the # character and adding a number with up to three digits (e.g. "LANCOM", "LANCOM#1", "LANCOM#2" etc.).
Important: To use this entry in the firewall, it has to be referenced under .
- Wildcard expressions
-
Contains a comma-separated or space-separated list of wildcard expressions. The expressions can contain any number of ? (any character) and * (several arbitrary characters), e.g. "*.lancom.*". The input is limited to 252 characters. If you need more DNS wildcard expressions for a service, then you can group multiple DNS destinations into one referenced object in the DNS destinations list.
Unicode characters for internationalized domain names can be entered as follows:
- UTF-8: Here, one to four bytes must be entered individually as '\x' followed by two hexadecimal digits.
- UTF-16: Here, one or two double bytes must be entered as '\u' followed by four hexadecimal digits.
- UTF-32: Here, the value must be entered as '\U' followed by eight hexadecimal digits.
- Application name
- Name for the tracking of HTTP/HTTPS connections for layer-7 application detection (e.g. youtube). Specifying this name activates the layer-7 application detection.
- Application priority
- By specifying the priority you set the order in which services are evaluated if certain host-name parts appear in multiple entries (e.g. *google).