Application
Description
Traffic that the system can characterize into well-known applications. Applications are system defined objects that cannot be modified by the user. (Note: The field level constraints listed here might not cover all the constraints on the field. Additional constraints might exist.)
Supported Operations
Model Properties
| Property | Required | Type | Description | |||
|---|---|---|---|---|---|---|
| name | True | string | The name of the detected application. | |||
| appId | True | integer | Unique application identifier. Field level constraints: cannot be null. (Note: Additional constraints might exist) |
|||
| description | False | string | Description of the application. Field level constraints: length must be between 0 and 512 (inclusive). (Note: Additional constraints might exist) |
|||
| tags | False | [object] | List of objects that contain additional information about an application. Applications can have any number of tags, including none. Allowed types are: [ApplicationTag] |
|||
| categories | False | [object] | List of general classifications for an application that describes its most essential function. Each application belongs to at least one category. Allowed types are: [ApplicationCategory] |
|||
| deprecated | False | boolean | A Boolean value, TRUE or FALSE (the default). The TRUE value indicates that the application is no longer in use. | |||
| tagIds | False | [integer] | A list of all tags which apply to this application. | |||
| categoryIds | False | [integer] | A list of all categories to which this application belongs. | |||
| id | False | string | A unique string identifier assigned by the system when the object is created. No assumption can be made on the format or content of this identifier. The identifier must be provided whenever attempting to modify/delete (or reference) an existing object. Field level constraints: must match pattern ^((?!;).)*$. (Note: Additional constraints might exist) |
|||
| applicationTypes | False | [object] | List of application types: SERVER: Known application protocol CLIENT: Client application WEBAPP: Web application |
|||
| productivity | False | integer | The likelihood that an application is used within the context of the organization's business operations, as opposed to recreationally. An application's business relevance can range from Very Low to Very High. Of Application Protocol Business Relevance, Client Business Relevance, and Web Application Business Relevance, the lowest of the three detected, when available, in the traffic that triggered the intrusion event. | |||
| risk | False | integer | How likely an application is to be used for purposes that might be against your organization's security policy. The risk can range from Very Low to Very High. Of Application Protocol Risk, Client Risk, and Web Application Risk, the highest of the three detected, when available, in the traffic that triggered the intrusion event. | |||
| type | True | string | A UTF8 string, all letters lower-case, that represents the class-type. This corresponds to the class name. | |||