Blocking all instant messaging
Instant messaging use is not permitted at the Example Corporation. Application control helps enforce this policy.
First you will create an application sensor with a single entry that includes all instant messaging applications. You will set the list action to block.
To create the application sensor
1. Go to Security Profiles > Application Control > Application Sensors.
2. Select the Create New icon in the title bar of the Edit Application Sensor window.
3. In the Name field, enter no_IM for the application sensor name.
4. Select OK.
5. Select the Create New icon in the sensor.
6. For the Sensor Type select Filter Based.
7. For Category, select only IM.
8. For Popularity, Technology and Risk, make sure that all of the options are selected.
9. For Action, select Block.
10. Select OK to save the new filter.
11. Select Apply to save the sensor.
Next you will assign the sensor to a policy.
To enable application control and select the application sensor
1. Go to Policy > Policy > Policy.
2. Select the security policy that allows the network users to access the Internet and choose Edit.
3. Under the heading Security Profiles toggle the button next to Application Control to turn it on.
4. In the drop down menu field next to the Application Control select the no_IM application sensor.
5. Select OK.
No IM use will be allowed by the security policy. If other firewall policies handle traffic that users could use for IM, enable application control with the no IM application sensor for those as well.