Method of configuring a policy of a network device, and appliance and method of applying object-oriented expressions in a policy

摘要

A method and apparatus for configuring one or more application security profiles for a device, each profile specifying a number of checks performing security functions related to an application. A configuration interface is used for configuring an application security profile to comprise checks to perform on a packet stream related to an application. The configuration interface receives first and second settings specifying first and second checks of the profile. The checks each comprise a set of policies, settings or actions related to respective security functions. The configuration interface identifies a policy that specifies a rule comprising a first expression and information identifying the application security profile to be processed based on an evaluation of the rule.