Application Control is now standard with FortiCare support

Application Control is now a standard part of any FortiCare support contract and the database for Application Control signatures is separate from the Intrusion Prevention System (IPS) database. However, botnet application signatures are still part of the IPS signature database since these are more closely related to security issues than application detection.

With the release of FortiOS 5.6.1, the Application Control signature database information is displayed under the System > FortiGuard page, in the FortiCare section. The botnet category is no longer available when you search for the Application Signatures list.

To receive updates to the Application Control signature database, you must have a valid FortiCare support contract.

IPS / Application Control logging performance

There is a major boost to Application Control and IPS when logging is enabled. With the latest changes, the performance difference with or without logging enabled is negligible.