But also in what is a Palo Alto, Ephiny, that's very, very important concept, and most people confuse
that.
But what is an app?
So so far there is no generic definition.
I appreciate it.
Basically, read the Bible not only for the board and the board members and all those things.
They look for the specific application as well.
So now we are searching what is the API?
We just try to get the concept right after the device is at the core of the panel.
With the critical security U.S. policy, each session contains the information necessary to identify
the application traversing the five.
OK, so we know the definition for all is not just waiting for the boat by deep water fifty, 55, 45,
something like that, but the look for the vehicle application signature itself.
But for example, if you want to blog the YouTube, at least guilelessly I know something man vivax.
These are the application.
You in your environment department do have the capability to look for the application itself.
How he does.
Let's just let's just look for a few scenarios, what is to define the application?
So after 30 years of investigation at the heart of the firewall with result of becoming the basics of
the security policy, the classified platform classified a traffic report and the protocol, which is
at one point was a satisfactory mechanism to the application, can easily bypass the broad base of the
firewall hope hoping for using a system that is sensitive report reportedly using the national report
and why it is important that classified mechanism that addresses the traffic classification of traditional
firewall by the U.S., the multiple identification mechanisms to determine exactly the definition of
the application we were discussing.
The matter exploded a few discussions.
Few points here to see what is an application.
Here you can see applications are it can be Google and it can be Sibos immune demands that the person
who is actually using those application, it is called most likely application with the user directly
into the Gmail for that has some sort of application as well to Gmail.
Jimmy Dog Gmail calendar.
OK, so these are all the different application nowadays are visible everywhere.
No, the problem is we have few problems and we just see how the how we can find out what the what is
the real benefit of using the application and application.
But basically, there are some application to that abusive in nature.
What do you mean by aggressive in nature?
For example, in your network, you have Longport 50/50.
You have also blocked four six six eight one.
No, but you have a law report for your Internet traffic.
But the 50 50, 60, 68 ones that block some application like Yahoo!
Messenger, BitTorrent.
They have the capability and capacity to first of all, they challenge you on their default port, which
are blocked.
So they will be denied initially, however, they have been then and they have the capability and capacity
to change from the default behavior to Port Authority, for example, but because port, it is already
allowed inside your network.
So your traffic will be getting through.
So this mean if you just follow our block, the traffic, these are just appalling, but nowadays the
implications are of this nature.
You can pick your firewall and they can let you through because some of the genetic applications are
already so important.
So if you allow or block the traffic based on just a number of different applications, know, for example,
BitTorrent and Yahoo!
Messenger are one of the two applications.
This is a his.
OK, this is exactly the same thing that.
This is the previous story as it's been here.
Scenario one, there are few signs to discuss the number one prediction about.
Blocking traffic actually control the traffic to allow these services, such as the Interstate five
configured for follow 453 on the payroll to follow, everyone is going to do a lot better service rather
than simply put, no.
In this example, the end result is the same.
The traffic is allowed.
However, this will not protect the network from the other products, from the other services using
the same service.
So let's look at this.
Scenario one.
But what if the scenario is in the scenario if you look at his legacy fiber and the Mexican flag on
the border is allowed because because it's a district, but what happens is that it will be allowed
on the 14th Street.
But what happened on the new 524000 to find all the pictures will be blocked because only DNS traffic
is allowed, because the NSA is not using his signature piece application Motiva application, actually.
But if somebody this is L.A., I mean, this is the old Cisco NSA, for example, or undefiled juniper
firewall, but not always when you allow the DNS, not just the number 53, but the application DNS
itself, it will mean the traffic will be allowed, will be allowed, but the NSA will need any traffic,
any port, any other application which changed the phone number will be allowed because BitTorrent is
denied by default, because the DNS is only allowed at the application level, not a support level that
you would be going by.
No, there can be a scenario where they need to be there can be, for example, be with the.
So they say if you allow these legacy forward with a legacy flight, will we also use the applied functionality
by using the IPSC functionality, for example, as well in this situation?
The first of all, it can get through from the pilot, but it can be blocked by the IPF.
OK, so what the problem is you need to buy two devices, one and two.
So you need to manage two devices with the application to actually you just need one device.
And you just a little on a lot of traffic on the genius level, the Beatles will be automatically blocked.
You don't need to have a second device.
And as a recording detected and blocked by the second engine, second security device.
But if you follow, I go forward to look for the DNA signature of the body and block the BitTorrent
automatically.
There's a second finishing.
This is exactly the same scenario between the Philadelphia.
In certain situations, you know, no matter when there is no the are available.
What happens if the zero attacks are existing when the patch is not existing, the RFID ideas actually
will still allow the traffic to zero the wait for the fireworks when they are using RFID.
This zero day can be blocked as well.
Look at this.
OK, so this is a benefit of using the next generation firewall using the app.
That exactly.
Any questions so far?
They should be the.