Lesson 9 of 14
Not started
Application Control
Identify applications by signature regardless of port, control them by category and risk, handle overrides, and monitor usage.
Application control identifies traffic by application signature (deep packet inspection patterns) rather than by port, so it detects apps that hop ports, tunnel over 80/443, or deliberately evade. FortiGuard supplies thousands of signatures, each tagged with category, risk level, technology, vendor, and behavior (e.g., excessive-bandwidth).
Because it is signature-based, application control works best alongside SSL inspection for encrypted apps, and is an NGFW staple for enforcing acceptable-use and shadow-IT policy.
How does application control identify traffic?