METHOD OF CONFIGURING A POLICY OF A NETWORK DEVICE, AND APPLIANCE AND METHOD OF APPLYING OBJECT-ORIENTED EXPRESSIONS IN A POLICY

摘要

A method and apparatus for configuring one or more application security profiles for a device, each profile specifying a number of checks performing security functions related to an application. A configuration interface is used for configuring an application security profile to comprise checks to perform on a packet stream related to an application. The configuration interface receives first and second settings specifying first and second checks of the profile. The checks each comprise a set of policies, settings or actions related to respective security functions. The configuration interface identifies a policy that specifies a rule comprising a first expression and information identifying the application security profile to be processed based on an evaluation of the rule.