Identifies which applications are using the network and lets you allow, limit or block each one.
The firewall identifies applications by their traffic patterns, regardless of port, and applies policy to each.
This is one of the most direct tools for enforcing inmate technology rules. It shows what applications are in use, and it can block messaging, chat, proxies and VPNs, even when they try to disguise their traffic.
- Blocks messaging, chat and social apps on inmate networks.
- Blocks VPNs, proxies and other tools used to get around filters.
- Shows which applications each device tried to use.
- Application signatures: traffic is identified by behavior instead of port, so a blocked app can’t simply switch ports.
- Identifies apps regardless of port.
- Blocks unapproved remote access tools.
- Works with traffic prioritization.
| Control | Priority | How this helps |
|---|---|---|
| CM-7Least Functionality | P1 | Restricts unnecessary applications. |
| AC-4Information Flow Enforcement | P1* | Controls flows by application. |
Based on CJIS Security Policy v6.1. This product can support these controls but can’t satisfy them alone. How to read this table