Справочник Пользователя для SonicWALL 5.8.1
![SonicWALL](https://files.manualsbrain.com/attachments/f3f2020e62d845c1f0944139602c2c25d4b9d245/common/fit/150/50/7162a7154dd3881061179f0db28d2a1090909f96138d4697280baa1e704f/brand_logo.jpeg)
App Control Use Cases
685
SonicOS 5.8.1 Administrator Guide
Web Browser Control
You can also use Application Control to protect your Web servers from undesirable browsers.
Application Control supplies match object types for Netscape, MSIE, Firefox, Safari, and
Chrome. You can define a match object using one of these types, and reference it in a policy
to block that browser.
Application Control supplies match object types for Netscape, MSIE, Firefox, Safari, and
Chrome. You can define a match object using one of these types, and reference it in a policy
to block that browser.
You can also access browser version information by using an HTTP User Agent match object
type. For example, older versions of various browsers can be susceptible to security problems.
Using Application Control, you can create a policy that denies access by any problematic
browser, such as Internet Explorer 5.0. You can also use negative matching to exclude all
browsers except the one(s) you want. For example, you might want to allow Internet Explorer
version 6 only, due to flaws in version 5, and because you haven’t tested version 7. To do this,
you would use a network protocol analyzer such as Wireshark to determine the Web browser
identifier for IEv6, which is “MSIE 6.0”. Then you could create a match object of type HTTP User
Agent, with content “MSIE 6.0” and enable negative matching.
type. For example, older versions of various browsers can be susceptible to security problems.
Using Application Control, you can create a policy that denies access by any problematic
browser, such as Internet Explorer 5.0. You can also use negative matching to exclude all
browsers except the one(s) you want. For example, you might want to allow Internet Explorer
version 6 only, due to flaws in version 5, and because you haven’t tested version 7. To do this,
you would use a network protocol analyzer such as Wireshark to determine the Web browser
identifier for IEv6, which is “MSIE 6.0”. Then you could create a match object of type HTTP User
Agent, with content “MSIE 6.0” and enable negative matching.
Microsoft Visio
vsd
Microsoft Visual Basic
vbp
Microsoft Word
doc
Microsoft Works
wps
Portable Document Format
pdf
Rich Text Format
rft
SIT archives
sit
Text files
txt
WordPerfect
wpd
XML
xml
Tar archives (“tarballs”)
tar
ZIP archives
zip, gzip
File Type
Common Extension