- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
Blocking Online Streaming Audio Using Application Firewall
10/14/2021 
34 People found this article helpful
36,861 Views
Description
Application firewall scans application layer network traffic as it passes through the gateway and looks for content that matches configured keywords. When it finds a match, it performs the configured action. It can match text or binary content. When you configure application firewall, you create policies that define the type of applications to scan, the direction, the content or keywords to match. You could also optionally define the user or domain to match, and the action to perform.
Application Firewall provides application layer bandwidth management among other things. You can use application layer bandwidth management to control the amount of network bandwidth that can be used to transfer certain file types. This allows you to discourage non-productive traffic and encourage productive traffic on your network.
Online audio streaming can consume a large amount of bandwidth. This article illustrates a method to block such traffic using Application Firewall.
Resolution
Resolution for SonicOS 6.5
This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.
Application Firewall is license based. License can be viewed under Manage | Licenses.
Defining an Application Object
- Login to the SonicWall Management GUI
- Navigate to the Manage | Objects | Match objects page.
- Click on the Add New Object button
- In the Edit Applicable Firewall Object page, enter information as per the screenshot.
- Click on OK to save.
The media-type values in the above screenshot are only examples. All media=types for audio can be found here: http://en.wikipedia.org/wiki/Internet_media_type#List_of_common_media_types
Creating an Application Firewall Policy
Navigate to the Rules| Application Control page.
Click on Add New Policy.
Enter the following information and click on OK to save.
How to Test:
To test this scenario go to an audio streaming site and play audio content. You should see alerts similar to the ones shown below in the log.
Resolution for SonicOS 6.2 and Below
The below resolution is for customers using SonicOS 6.2 and earlier firmware. For firewalls that are generation 6 and newer we suggest to upgrade to the latest general release of SonicOS 6.5 firmware.
Application Firewall is license based. You can view the status of your license at the top of the Application Firewall | Policies page. You must enable Application Firewall to activate its functionality.
Defining an Application Object
- Login to the SonicWall Management GUI
- Navigate to the Application Firewall | Policies page.
- Check the box under Enable Application Firewall.
- Navigate to the Application Firewall | Application Objects page
- Click on the Add New Object button
- In the Edit Applicable Firewall Object page, enter information as per the screenshot.
- Click on OK to save.
The media-type values in the above screenshot are only examples. All media=types for audio can be found here: http://en.wikipedia.org/wiki/Internet_media_type#List_of_common_media_types
Creating an Application Firewall Policy
Navigate to the Application Firewall | Policies page.
Click on Add New Policy.
Enter the following information and click on OK to save.
How to Test:
To test this scenario go to an audio streaming site and play audio content. You should see alerts similar to the ones shown below in the log.
Related Articles
- How to enable and configure NTP?
- Cannot edit App Control Signatures, "Error: property 'value' can't be empty value"
- SSL-VPN 2FA: How to unbind TOTP for a single user or multiple users
Categories
- Firewalls > SonicWall NSA Series
- Firewalls > SonicWall SuperMassive 9000 Series
- Firewalls > SonicWall SuperMassive E10000 Series
- Firewalls > TZ Series
YES
NO