DescriptionIn FortiOS v5.2, the default Application sensor has categories enabled by default. These categories cannot be removed via GUI.
ScopeApplication sensor.
SolutionThe change can be made by using the CLI:
FWF90D # config application list
FWF90D (list) # edit default
FWF90D (default) # sh
config application list
edit "default"
set comment "Monitor all applications."
set other-application-log enable
config entries
edit 1
set category 2 3 5 6 7 8 12 15 17 19 21 22 23 25 26 28 29 30
set action pass
set log disable
next
end
next
end
FWF90D (default) # config entries
FWF90D (entries) # edit 1
FWF90D (1) # unset category
FWF90D (1) # set category
ID Select Category ID
1 IM
2 P2P
3 VoIP
5 Video/Audio
6 Proxy
7 Remote.Access
8 Game
12 General.Interest
15 Network.Service
17 Update
19 Botnet
21 Email
22 Storage.Backup
23 Social.Media
24 File.Sharing
25 Web.Others
26 Industrial
27 Special
28 Collaboration
29 Business
30 Cloud.IT
FWF90D (1) # set category 2 3
FWF90D (1) # end
FWF90D (default) # end
FWF90D # config application list
FWF90D (list) # edit default
FWF90D (default) # sh
config application list
edit "default"
set comment "Monitor all applications."
set other-application-log enable
config entries
edit 1
set category 2 3
set action pass
set log disable
next
end
next
end