All the filter options that you add and configure must match (be true) for the associated policy event(s) to be evaluated.
| Setting | Description |
|---|---|
| Domain | Enter one domain name. The domain names does not have to be fully qualified (you can enter, for example, cnn.com instead of http://www.cnn.com) and it is evaluated from right to left, so cnn.com would also include, for example, news.cnn.com and sports.cnn.com. Do not enter the protocol (http, https, etc.) When a domain name is entered, the filter criteria matches only when an app attempts to connect to that domain. |
| IP Address |
Enter one or more IP addresses, separated by commas. When an IP address is entered, the filter criteria matches only when an app attempts to connect to that IP address. {{tag.Product Name}} accepts IPv4 IP addresses in data filters. IPv4 IP addresses are 4 numbers separated by periods, each number in the range of 0-255. You can enter single IP addresses, IP address ranges, and CIDR (Classless Interdomain Routing) notation, but not wildcards (using *). |
| Protocol | Select TCP (default) or UDP. When a protocol is defined, the filter criteria matches when an app attempts to use the defined protocol. |
| Port |
Enter one or more port numbers, separated by commas. When ports are defined, the filter criteria matches when an app attempts to use a defined port. {{tag.Product Name}} accepts port numbers in the range of 1 to 65535, inclusive, in data filters. You can enter single port numbers and port ranges. |
| App ID | Enter one app ID (also known as a package name). (Find App IDs) When an app ID is entered, the filter criteria matches when an app with that ID attempts a connection. |
Configuration of data filters can become quite complex, especially because some fields accept ranges of numbers as well as individual values. This section describes some examples of data filter configuration.
WhatsApp is a popular messaging app that also has the capability to make voice calls over data, or VoIP (voice over IP). You want to sell WhatsApp app plans for messaging only, restricting WhatsApp users from using the app for VoIP calls so customers will purchase voice plans for voice calls.
| Setting | Value |
|---|---|
| Package (App ID) |
This is the package name of the WhatsApp application. com.whatsapp |
| Port |
WhatsApp uses only port 3478 for its VoIP functionality. So enter 2 ranges that include all ports except the one you want prevented from use, the VoIP port. No other ports need to be restricted, so the 2 ranges can include all the non-VoIP ports. 1-3477, 3479-65535 |