Deep Inspection for Cloud Applications
Deep inspection allows the following information to be examined and logged for cloud applications:
• Information about user logins and file transfers for cloud applications.
• Video names will be shown in the Application Details column for video streaming applications such as Youtube and Vimeo.
• The following new fields have been added to both the application control log and to traffic logs: cloud user, cloud action, file name, and file size.
To enable this feature, turn on Deep Inspection of Cloud Applications in an application control profile. It can also be enabled using the CLI.
Syntax
config application list
edit <name>
set deep-app-inspection enable
end
end
Using the CLI, you can specify a global timeout for the deep application control database. Any database entries that exceed the timeout will be deleted. A global size threshold on the number of entries in the deep application control database can also be set.
When the total number of entries exceeds this threshold, the internal timeout value will be reduced to accelerate entry retiring. Both values are set to 0 (unlimited) by default.
Syntax
config ips global
set deep-app-insp-timeout <integer>
set deep-app-insp-db-limit <integer>
end
A new option, --deep_ctrl, has also been added to the syntax for IPS/application control signatures.
Several new CLI commands have also been added for diagnose and debugging:
• diagnose ips dac info
• diagnose ips dac clear
• diagnose ips debug enable dac