Application control for Gaming

Do you have policy where you block it?

Try to find the application on the fortiguard website. If you can find it there, you need just application security profile.  You don't need to configure ports, etc.

Hi Chris,

Application Control, as you mentioned, is a security feature that you can use to control the applications that users on your network can access. It gives you granular control over application usage, and it can be very helpful in maintaining network security while still allowing necessary services.

When it comes to configuring application control for gaming, there are a couple of key points to consider.

**1. Understanding the Application Control Profile:**

The Application Control Profile identifies the applications that you want to allow or block. In your case, you want to allow gaming applications such as Steam. In this profile, you'll identify the specific applications that you want to allow. Application control systems usually come with predefined profiles for popular applications, so you won't need to configure this from scratch.

**2. Scheduling the Application Control Profile:**

You want to allow gaming after core hours, so you'll need to schedule the application of the Application Control Profile. This is usually done through policy management. You'll create a policy that applies the Application Control Profile according to a certain schedule.

**3. Handling Ports and Services:**

Application control systems generally use Layer 7 (Application Layer) information to identify and control applications, which means they can identify applications regardless of the ports they are using. This can be helpful in situations where applications use dynamic ports or non-standard ports.

Therefore, you don't need to manually specify the ports for each gaming service. The application control system should handle this for you.

However, you should still have a default policy that blocks all unnecessary ports and services. This way, even if an application is allowed by the application control system, it still won't be able to communicate if it's using a blocked port or service. This provides an extra layer of security.

**4. Minimizing Open Ports:**

To minimize the number of open ports, you can use the principle of least privilege. This means only opening the ports that are absolutely necessary for the applications you want to allow.

In summary, you can achieve your goal by creating an Application Control Profile that allows the necessary gaming applications, scheduling this profile to be applied after core hours, and maintaining a default policy that blocks all unnecessary ports and services.

I hope this helps! Let me know if you have any further questions.

You can create a separate policy only allowing the src IP accessing gaming service, then you can allow all the application signatures involved in gaming with logging