<<

Application List

Exinda ExOS Version 6.4 © 2014 Exinda Networks, Inc. 2 Copyright

© 2014 Exinda Networks, Inc. All rights reserved. No parts of this work may be reproduced in any form or by any means - graphic, electronic, or mechanical, including photocopying, recording, taping, or information storage and retrieval systems - without the written permission of the publisher. Products that are referred to in this document may be either trademarks and/or registered trademarks of the respective owners. The publisher and the author make no claim to these trademarks. While every precaution has been taken in the preparation of this document, the publisher and the author assume no responsibility for errors or omissions, or for damages resulting from the use of information contained in this document or from the use of programs and source code that may accompany it. In no event shall the publisher and the author be liable for any loss of profit or any other commercial damage caused or alleged to have been caused directly or indirectly by this document. Document Built on Tuesday, October 14, 2014 at 5:10 PM Documentation conventions

n bold - Interface such as buttons or menus. For example: Select the Enable checkbox.

n italics - Reference to other documents. For example: Refer to the Exinda Application List.

n > - Separates navigation elements. For example: Select File > Save.

n monospace text - Command text.

n - Command line arguments.

n [x] - An optional CLI keyword or argument.

n {x} - A required CLI element.

n | - Separates choices within an optional or required element.

© 2014 Exinda Networks, Inc. 3 Table of Contents

Chapter 1: Configuring Applications And Application Groups 4

Add a new Application 4

Add or update an application group 12

Chapter 2: Predefined Applications And Application Groups 14

Predefined Applications and Supported L7 Signatures 14

Predefined Application Groups 27

© 2014 Exinda Networks, Inc. Application List

Chapter 1: Configuring Applications and Application Groups

Add a new Application Application objects are used to classify traffic on the network and are made up of layer 7 signatures, TCP/UDP port numbers and port ranges, protocols, network objects, or DSCP marks. Application classification can be used to monitor traffic or to create application-specific policy. There are many predefined applications on the appliance. You can add applications that are not already in the list. Applications can be created from L7 signatures, or TCP/UDP port numbers or ranges, or protocols, or DSCP marks, or network objects, or various combinations of these. The following are valid combinations:

n Applications based on only L7 signatures. For example, you can create an application for a particular by selecting http, host, and entering the domain of the website.

n Applications based on only port numbers.For example, HTTPS is defined as tcp port 443.

n Applications based on L7 signatures can be augmented by matching port numbers or ranges as well. For example, HTTP is defined as matching the L7 signature 'http' or TCP port 80. Note that the L7 signature and port are OR'ed.

n Applications based on protocol. For example, the predefined VRRP application is based on the vrrp protocol.

n Applications based on L7 signatures can be augmented by matching a protocol as well. For example, the ICMP app is defined as matching the L7 signature icmp or the protocol icmp. Note that the L7 signature and protocol are OR'ed.

n Applications based on DSCP marks. For example, on your Riverbed appliance mark your CIFS traffic with a particular DSCP mark, then define an application using that DSCP mark to identify CIFS within a Riverbed- accelerated stream.

n Applications based on only network object. For example, you could define an application based on a par- ticular application , particular site, or particular user or user group (specified by network object).

n DSCP marks can be used in combination with network object, port, or protocol to refine the traffic for a given application. Note that DSCP mark + network object, or DSCP mark + port, or DSCP mark + protocol are AND'ed.

n Network objects can be used in combination with DSCP marks, port, or protocol to refine the traffic for a given application. Note that network object + DSCP mark, or network object + port, or network object + protocol are AND'ed.

n Application based on DSCP mark + network object + port. Not that DSCP mark + network object + port are all AND'ed.

Network objects cannot be used in conjunction with a layer 7 signature.

© 2014 Exinda Networks, Inc. 5 Chapter 1: Configuring Applications and Application Groups

Note: When creating applications based on ports, any given port number can only be defined once for TCP and once for UDP. The same port number can be defined for TCP and UDP. For example, if you define an application object with a port range TCP 500-510, you cannot then define another application object on TCP port 505. However, you can define another application object with UDP port 505. You can define duplicate ports/port ranges if a network object is also specified.

Many of the L7 signatures have sub-type classifications, which makes layer 7 visibility much more granular. For instance, for reporting on specific web applications, most vendors can only report on port 80 traffic. Exinda allows a deeper look into Layer 7 applications. For example, by comparison:

n Layer 4 reporting tools report on web applications as: port 80 or HTTP

n Layer 7 reporting tools report on web applications as: Yahoo or

n Exinda s Layer 7 with sub-type classification report on web applications as: Yahoo , Yahoo voice, or Yahoo webchat.

This allows you to monitor on a much more granular level.

© 2014 Exinda Networks, Inc. Chapter 1: Configuring Applications and Application Groups 6

To add a new application

1. In the Add New Application area, enter a name for the new application. 2. Define an application to be based on one of the following:

n L7 signature

n L7 signature + ports or protocols (OR'ed together)

n Network object

n DSCP mark

n Port or protocols

n Network object + ports or protocols (AND'ed together)

n Network object + DSCP mark (AND'ed together)

n DSCP mark + ports or protocols (AND'ed together)

n Network object + DSCP mark + ports or protocols (AND'ed together) Note that network objects cannot be used in conjunction with a layer 7 signature. 3. Select the Network Object for the application. If the network object is internal, then traffic inbound to the LAN with the network object as a destination will be matched to this application, and traffic outbound from the LAN with the network object as the source will be matched to this application. If the network object is external, then traffic inbound to the LAN with the network object as a source will be matched to this application, and traffic outbound from the LAN with the network object as the destination will be matched to this application.

© 2014 Exinda Networks, Inc. 7 Chapter 1: Configuring Applications and Application Groups

4. Select the DSCP mark for the application. Multiple DSCP marks or DSCP mark ranges can be used by specifying a range using a dash (e.g. 1-20) and by using commas (e.g. 1-20,44,63) 5. Select the L7 Signature for the application. Some layer 7 signatures have additional options that allow you to define application objects based on specific parts of that L7 signature. If a layer 7 signature is selected, specify the parameters for the signature. For example, to create an application object that matches traffic to and from the Exinda.com website, in the L7 Signature field, select http --->, host, and type exinda.com. 6. In the Ports/Protocols controls, specify either TCP ports/port ranges, UDP ports/port ranges, or a layer 3 protocol. Multiple ports and port ranges can be specified at the same time by comma separating values. 7. Click the Add New Application button.

What L7 signature options are there?

Some Layer 7 signatures have additional options that allow you to define application objects based on specific parts of that L7 Signature. When configuring new application object, the L7 signatures followed by '--->' in the drop-list have additional options. Most provide options that you simply select from. Some require a selection plus additional information. The following table explains the various options that require more than simply picking an option.

Layer 7 Sig- SubType Description nature

citrix application Allows you to define an Application Object based on a published Citrix application name.

priority Allows you to define an Application Object based on a published Citrix priority. Citrix priorities are 0=High, 1=Medium, 2=Low, 3=Background. The Citrix priority detection will only work if Citrix is running without session-reliability, over TCP port 1494.

user Allows you to define an Application Object based on the user running the Citrix published application.

ddl (direct down- host Allows you to define an Application Object based on the 'host' field in the load link) HTTP header.

flash host Allows you to define an Application Object based on the 'host' field in the HTTP header (where flash is running over http).

http content_ Allows you to define an Application Object based on the 'content-type' type field in the HTTP header.

© 2014 Exinda Networks, Inc. Chapter 1: Configuring Applications and Application Groups 8

Layer 7 Sig- SubType Description nature

file Allows you to define an Application Object based on the filename requested in the HTTP URL.

host Allows you to define an Application Object based on the 'host' field in the HTTP header.

method Allows you to define an Application Object based on the HTTP method (e.g. GET PUT HEAD DELETE).

user_agent Allows you to define an Application Object based on the 'user-agent' field in the HTTP header.

advanced Define custom criteria with the following syntax:

n A string literal is enclosed in quotes (").

n Internal quotes can be escaped with the backslash (\") character.

n A backslash can be included in the string by escaping it with another backslash (\\).

n Keywords are bare (common_name) with no quotes.

n Keywords are bare (host) with no quotes.

n Grouping is supporting using parenthesis

n Operators supported are or and and and has higher precedence than or

n The comparison operators that are available are: Description Syntax Example = host = equals "example.com" != host != does not equal "example.com" =% host =% contains substring "example.com" does not contain !% host !% substring "example.com" Right side is a regular expression and it =~ host =~ matches the full left "example.*" side Right side is a regular expression and it does !~ host !~ not match the full left "example.*" side

© 2014 Exinda Networks, Inc. 9 Chapter 1: Configuring Applications and Application Groups

Layer 7 Sig- SubType Description nature

n Regular expressions use the syntax

n The keywords for HTTP are: host, file, user_agent, content_type, method, content_len and encoding

Examples:

n (url =% "index" or file =% "login") and host =% "example.org" and content_type.case = "MyContentType"

n (host =% ".com" and file !% "cgi-bin/abcd") or host =% "facebook2.com"

mpeg host Allows you to define an Application Object based on the 'host' field in the HTTP header (where mpeg is running over http).

quicktime host Allows you to define an Application Object based on the 'host' field in the HTTP header (where quicktime is running over http).

silverlight host Allows you to define an Application Object based on the 'host' field in the HTTP header (where silverlight is running over http).

ssl common_ Allows you to define an Application Object based on the 'common name' name field in the SSL certificate.

advanced Define custom criteria with the following syntax:

n A string literal is enclosed in quotes (").

n Internal quotes can be escaped with the backslash (\") character.

n A backslash can be included in the string by escaping it with another backslash (\\).

n Keywords are bare (common_name) with no quotes.

n Grouping is supporting using parenthesis

n Operators supported are or and and and has higher precedence than or

n The keywords for SSL are common_name (cn) and organization_ name (o)

n The comparison operators that are available are: Description Syntax Example = common_name = equals "John"

© 2014 Exinda Networks, Inc. Chapter 1: Configuring Applications and Application Groups 10

Layer 7 Sig- SubType Description nature

Description Syntax Example != common_name does not equal != "John" =% common_name contains substring =% "John" does not contain !% common_name substring !% "John" Right side is a regular expression and it =~ common_name matches the full left =~ "John*" side Right side is a regular expression and it does !~ common_name not match the full left !~ "John*" side

n Regular expressions use the perl syntax

organization_ Allows you to define an Application Object based on the 'organization' name name field in the SSL certificate.

spdy This field should remain empty as any values typed here are ignored.

rtp codec Allows you to define an Application Object based on the 'codec' used in a RTP stream.

windowsmedia host Allows you to define an Application Object based on the 'host' field in the HTTP header (where windowsmedia is running over http).

Example: How to create a custom application based on HTTPS protocol

Get the common name of the (https) SaaS site and create an application using the ssl L7 signature with the common name.

1. Go to the site that you are interested in. 2. In the address bar of most browsers, click on https or the lock symbol. 3. Show the certificate details. 4. Copy the common name shown in the certificate details. 5. Go to Objects > Applications. 6. In the L7 Signature field, select 'ssl --->'

© 2014 Exinda Networks, Inc. 11 Chapter 1: Configuring Applications and Application Groups

7. In the field beside the L7 Signature, select common name. 8. Enter the common name of the site that you got from the certificate in the browser.

Example: How to create a custom application based on Riverbed DSCP markings

Read Creating Applications from DSCP-marked traffic (like Riverbed accelerated traffic).

What applications are predefined?

See Predefined Applications and Supported L7 Signatures.

© 2014 Exinda Networks, Inc. Chapter 1: Configuring Applications and Application Groups 12

Add or update an application group Application groups are used to group together applications into a logical group. The application groups can be used to monitor the traffic or to create policy based on a category. For example, you can monitor and throttle streaming applications or you can monitor and protect business critical applications categorized as your ordering system that may include an inventory system and a point of sale system. There are several predefined application groups, such as Mail, P2P, Voice, etc. You can edit existing application groups or create new ones.

Note: A given application can exist in multiple application groups. However, monitored groups must not contain applications which are already a member of another group being monitored. Any given application can only be monitored within a single application group.

To add a new application group

1. In the Add New Application Group area type a name for the new group. 2. Select the applications that belong in the new group. By default, there are four drop-downs available to add Application Objects. If you need to add more, save the application group object, then select the Edit button next to the newly created application group. You will be presented with four additional drop-downs to add more applications. 3. If you want this application group to be monitored in the Application Group report, select the Monitoring checkbox. 4. Click Add New Application Group.

To update an application group

© 2014 Exinda Networks, Inc. 13 Chapter 1: Configuring Applications and Application Groups

1. Locate the group from which to add or delete applications and click Edit. 2. Select a new application from a blank drop-list. Or to remove an application, open the drop-list with the application to remove and select the blank row at the top. 3. Click Apply Changes.

What application groups are predefined?

See Predefined Application Groups.

© 2014 Exinda Networks, Inc. Chapter 2: Predefined Applications and Application Groups 14

Chapter 2: Predefined Applications and Application Groups

Predefined Applications and Supported L7 Signatures The protocol of network traffic is identified based on a combination of deep packet inspection (DPI) and behavioral analysis – no matter if they are plain text or use advanced and obfuscation techniques. The following list includes all supported protocols and applications (in bold), sub-protocols (in italic) and clients (in normal letters).

0-9

360 Mobile Security

A

Acronis AFSVL Apple Talk

Activesync Aimini Apple Updates n Audiogalaxy iOS

ACTNET AirPort Utility AppleJuice n Audiogalaxy Android

AD Replication Amazon Cloud Ares AURP Adobe Creative Cloud Amazon Shop Filepipe AVI KCEasy Adobe Updates Anonymous Proxy Avira AdobeConnect Antivirus Lab Ariel ADrive ANts P2P Armagetron

B

Backweb n Bits on Wheels n Blackberry

Battlefield n BitSpirit n Pando Blackberry-encrypted

Bebo n BitSticks n qBittorrent Blackberry- Blackberry-messenger BGP n BitTornado n QTorrent n ORB- Biff n BitTorrent / Mainline n rTorrent n BlackBerry bini n BitTyrant n Rufus Service Bitdefender n Blizzard Down- n n BlackBerry Man- loader BitTorrent n Sharktorrent agement Center BitTorrent-plain n BTG n SoMud n BlackBerry Mes- n BtManager BitTorrent-encrypted n SymTorrent senger

© 2014 Exinda Networks, Inc. 15 Chapter 2: Predefined Applications and Application Groups

n ABC n burst! n Tomato Torrent Blackberry Mail

n Acquisition n CTorrent n TorrentFlux Blackberry Messenger

n Anatomic P2P n n TorrentSpy BOLT

n Arctic Torrent n n Torrent Station n Bolt Android

n Ares n Freeloader n Torrent Swapper BootPC n Azureus / n FrostWire n TorrentVolve n BTSharp n G3 Torrent n Transmission Burner

n BitComet n Gnome BitTorrent n Turbo Torrent

n BitFlu n Halite n μTorrent

n BitLord n KTorrent n μTorrent Mac

n BitPump n LimeWire n WizBit

n BitRocket n MLDonkey n Xtorrent

n MonoTorrent n ZipTorrent

n MooPolice

C

Call of Duty CiscoDiscovery ComodoUnite CRS

CBT Citrix n Comodo EasyVPN CUDev

Channel 4oD Club Penguin CORBA CVSpserver Chargen clussvc Crime City CyberGhost CIFS CNTV Crossfire

D

Dailymotion badongo.net fileupyours.com rapidshark.pl dameware banashare.com filevo.com rapidupload.com bestsharing.com filezup.com sanupload.com Daytime bigfilez.com freakshare.net savefile.com dcc biggerupload.com freespace.by scribd.com DDM-SSL bitshare.com fshare.vn sendmefile.com Deezer boosterking.com fsx.hu sendspace.com Demand5 cash-file.net ftp2share.com sharebase.to Demand5-stream chinamole.com gaiafile.com sharebee.com Demand5-web cobrashare.sk gamefront.com sharebig.com

n Demand5 iOS coolshare.cz gigapeta.com sharebigfile.com cramit.in gigasize.com sharebigflie.com DFS crocko.com gigeshare.com sharefile.net

© 2014 Exinda Networks, Inc. Chapter 2: Predefined Applications and Application Groups 16

DHCP cum.com gotoupload.com -online.bz DHCPv6 czshare.com hellshare.com share-rapid.cz data.hu hitfile.net shragle.com Diameter data-loading.com hostggg.com simpleupload.net DICOM dataport.cz hotfile.com speedshare.org DICOM TLS datei.to hulkshare.com storage.to DiDi IM depositfiles.com hyperfileshare.com terafiles.net DiDi Voice downupload.com ifile.it tunabox.net DirectConnect easybytez.com i-filez.com turbobit.net DirectConnect-hub easy-share.com ifolder.ru turbobit.ru DirectConnect-peer edisk.cz jakfile.com turboupload.com DirectConnect-adc-peer enterupload.com jumbofiles.com u.115.com euroshare.eu keepmyfile.com ugotfile.com n ApexDc++ extabit.com kewlshare.com uloz.to n BCDC++ eyvx.com kickload.com ultrashare.de n CZDC fastfileshare.com.ar leteckaposta.cz unibytes.com n DC# fast-load.net letitbit.net unlimit.co.il n DC++ fast-share.com livedepot.net up.4share.vn

n DCTC fik1.com live-share.com up-file.com

n Dolda Connect file2upload.net load.to upload.com.ua fileape.com loadles.in uploadbox.com n Elise filearchiv.ru massmirror.com uploadc.com n fulDC filearn.com mediafire.com uploaded.to n GtkDC filebase.to .1280.com uploader.pl n LDCC filecloud.com megafree.kz uploadfloor.com n LinuxDC++ filedude.com megaporn.com uploadpower.com

n Microdc filefactory.com megarapid.eu uploadstation.com

n Microdc2 fileflyer.com megarotic.com uploadyourfiles.de filefrog.com megashare.com upnito.sk n oDC filefront.com megashare.vn uptobox.com n Revconnect fileho.com megashare.vnn.vn usershare.net n SababaDC filehook.com megashares.com videobb.com n ShakesPeer filehost.tv .com vip-file.com n StrongDC++ filejungle.com midupload.com wiiupload.net

n filemaze.ws missupload.com wupload.com DirectDownload fileover.net mofile.com x7.to filepost.com mofile.net yourfilehost.com 10upload.com filepost.ru movreel.com yourfiles.biz 123upload.pl filer.net multishare.cz .com

© 2014 Exinda Networks, Inc. 17 Chapter 2: Predefined Applications and Application Groups

139pan.com .mail.ru mytempdir.com yunfile.to 163pan.com files.to netload.in ziddu.com 1-clickshare.com filesafe.to netuploaded.com zomgupload.to 1clickshare.net filesend.net obsiebie.najlepsze.net zshare.net 1fichier.com fileserve.com oron.com Discard 1-upload.com filesflash.com platinshare.com DLS 1-upload.to fileshare.in.ua przeklej.pl DNS 2shared.com filesmonster.com putshare.com Dofus 4fastfile.com filesonic.com qshare.com Doom3 4share.ws filesonic.in quickshare.cz 4shared.com filestube.com quicksharing.com Doook 4shared.vn files-upload.com rapidshare.com 4us.to file-upload.net rapidshare.de DRP adrive.com file-upload.to alldrives.ge allshares.ge annonhost.net asixfiles.com badongo.com

E eBay eDonkey EGP eBuddy eDonkey-plain enLegion

n eBuddy BrowserApplet eDonkey-encrypted Eset

n aMule n eBuddy iOS Evernote

n Hydranode echo ExindaAD n Jubster ExindaCom n Lphant ExindaSSL n MLDonkey ExindaWM

n

n Shareaza

n WinMX MP3

n XoloX

F

F-Prot Filemaker Florensia Fring Facebook Filetopia FNA Fring-voice

© 2014 Exinda Networks, Inc. Chapter 2: Predefined Applications and Application Groups 18

Facetime Finger Foursquare n Fring Android

Feidian FIX Forfone n Fring

FiCall n QuickFIX n Fring iOS

n FiCall iOS Flash Friendster FTP Fiesta FTP-control FTP-SSL FTP-data Funshion

G

Gadu-Gadu n Gluz Cloud Gopher

Gadu-Gadu-server n Gnucleus GoToMeeting

Gadu-Gadu-file-transfer n Gtk- GoToMyPC Gadu-Gadu-voice n iMesh Light GRE Gadu-Gadu-video n KCEasy Google Encrypted Grisoft n n Kiwi Alpha Music Grooveshark n GaduGadu Android n LimeWire Google Plus Groupwise n GaduGadu iOS n Morpheus GTP n Instantbird n Mutella Google Talk-voice GTP-control n n Phex Google Talk-file-transfer GTP-user-data n Miranda Google Talk-video GuildWars n Poisoned n n Adium n Qtella GameKit n n Shareaza n GMX Multimessenger n Swapper.NET Gnutella n iChat n Symella n Acqlite n Instantbird n WinMX MP3 n Acquisition n Kopete n XFactor n Apollon n Miranda n XNap n BearFlix n Pidgin n XoloX n Cabos n Pidgin (previously Goober Gaim) n CocoGnut Google n Proteus n DM2 Google-docs n Psi n Filepipe Google-cloud n Qnext n FrostWire Google-drive n /Trillian Pro n giFT Google-plus Google-encrypted n Web.de Mul- timessenger

© 2014 Exinda Networks, Inc. 19 Chapter 2: Predefined Applications and Application Groups

H

H323 Half-Life 2 HTTP-ALT

n HamachiVPN HL7 HTTPS

n NetMeeting n LogMeIn Hamachi Hotmail HTTPTunnel

n OpenH.323 Hi5 HTTP n HTTP-Tunnel Client n XMeeting HiDrive HTTP-audio HTTP-video

I

IAX IM+ Instagram IRC

n Diax n IM+ Android IP mobility IRC-file-transfer

n Firefly n IM+ Blackberry Iperf n Adium

n IAXComm n IM+ Symbian IPIP n Ayttm

n IAXPhone n IM+ Windows iPlayer n Fire Phone n Idefisk/Zoiper n iPlayer iOS n Instantbird n IM+ for Java phones n Kiax IPP n Web IRC n IM+ iOS n LoudHush IPSEC n Miranda

n PURtel IMAP IPSEC-data n mIRC

n YakaPhone IMAP-SSL IPSEC-control n Pidgin

n ZiaxPhone iMesh n Cisco VPN Client IRC-SSL BearShare ICAP n HotSpot Shield iOS isakmp iMesh Icecast IPSEC over UDP iSkoot iMesh Lite iCloud IPTV iTunes Lphant n T-Home/TV2 iTunes Radio n iOS Shareaza ICMP iMessage IPX ITV ITV-stream ICMPv6 IMO ITV-web ICQ Webchat n IMO Android n ITV Player iOS ident n IMO Blackberry

IGMP n IMO Browser Applet

n IMO for iPad

n IMO iOS

J

Jabber n Kopete JAP

© 2014 Exinda Networks, Inc. Chapter 2: Predefined Applications and Application Groups 20

Jabber-encrypted n Miranda n JAP/JonDo Jabber-file-transfer n Pidgin Java-RMI Jabber-voice n Pidgin (previously JBK3000 Jabber-video Gaim) JDENet n Adium n Proteus n Ayttm n Psi

n GMX Multimessenger n Qnext

n iChat n Trillian/Trillian Pro

n Instantbird n Web.de Mul- timessenger

K

Kaspersky Kerberos / Fasttrack

n Apollon Kontiki

n Filepipe

n iMesh Light

n Kazaa

n Kazaa Lite

n Mammoth

L

L2TP LDAP-SSL LLMNR Lync

n OpenL2TP Line lockd Lync-audio Lync-video Label Distribution LinkedIn LotusNotes Lync-file-transfer Protocol Live.com LoveFilm n Lync last.fm LiveJasmin LDAP

M

macfile MGCP MS Global Catalogue n Qnext

Manolito MGCP-control MS Global Catalogue n Trillian/Trillian Pro SSL n Blubster MGCP-rtp n Web.de Mul- Microsoft Dynamics AX MS Local Security timessenger n Piolet Architecture Microsoft Media Server n Windows Live MAPI MS-SQL n Windows Live iOS

© 2014 Exinda Networks, Inc. 21 Chapter 2: Predefined Applications and Application Groups

MapleStory mig33 msmq MSRP

MATIP mig33 Android MSN n Blink

McAfee MMS MSN-voice MSRPC MSN-file-transfer MCK n Windows Media mstask Player MSN-video mDNS Mute Modern War MSN-webchat MyMusic TW Mojo n aMSN Meebo-audio MyPeople Move Player n Adium Meebo-video MyPeople-audio n Ayttm n Meebo Android MPEG MySpace Jupster n Fire n Meebo Blackberry MySQL Screamerradio n GMX Multimessenger n Meebo MiniBar MyVideo VLC n Instantbird n Meebo Notifier n Jupster n Kopete n Meebo iOS n Screamer Radio MPlus n Mercury Meeting Maker n VLS MQTT n Microsoft Messenger MEGA n Winamp MS Exchange Mac Megaco H.248 Outlook Web Access n Miranda

n Pidgin

n Pidgin (previously Gaim)

N

nat-t Netflix NNTP

NCP n Netflix iOS n Nimbuzz Android NNTP-SSL

Net2Phone Netflow n Nimbuzz Blackberry NTP NETBIOS Netlogon n Nimbuzz Mac Netbus NetMotion n Nimbuzz Symbian NFS n Nimbuzz iOS

O

Octoshape Oracle Orkut n GMX Multimessenger

n CNN streaming n Oracle DB OS Update n iChat

Office 365 Oracle-SSL n iOS n ICQ OFFSystem ORB n Android n ICQ Android OGG ORB-server Oscar n ICQ Mac OS X

© 2014 Exinda Networks, Inc. Chapter 2: Predefined Applications and Application Groups 22

olap ORB-client Oscar-file-transfer n ICQ iOS

ooVoo ORB-client-rtsp Oscar-picture-transfer n ICQ mobile for Java ORB-client-rdt Oscar-voice n ooVoo iOS n Instantbird ORB-client-wmv Oscar-video OPEN FT n Kopete ORB-client-wma n AIM n Miranda OpenVPN ORB-client-flash n AIM Android n Hotspot Shield ORB-client-flv n Pidgin n AIM for Mac n MyFreedom ORB-client-3gp n Pidgin (previously n AIM for iPad ORB-client-upload- Gaim) Opera Mini n AIM iOS download n Proteus n Opera Mini Symbian ORB-client-rtp n Adium n Qnext n Opera Mini Android Orbix2000 n Ayttm n Trillian/Trillian Pro n Opera Mini Blackberry Orbix2000 SSL n Fire n Web.de Mul- n Opera Mini iOS timessenger

OSPF

P

Paltalk PCanywhere POPO PPStream

Paltalk-server PCoIP PornHub n PPStream Android

Paltalk-file-transfer PDProxy PostgreSQL n PPStream Mac Paltalk-voice PeerEnabler PPLive n PPStream Paltalk-video Pinterest n PPTV n PPStream iOS n Paltalk Android Poison Ivy n PPTV Android PPTP n Paltalk iOS POP n PPTV iOS Print Panda Security Pandora n PPTV HD iOS PS3 Pando POP-SSL n PPTV Mac

Q

QQ QQ Games QuickTime

QQ-file-transfer QQLive n iTunes QQ-voice n QQLive Android Quotd QQ-video n QQLive iOS n Instantbird n QQLive iPad n QQ HD iOS Quake-HalfLife n QQ International n Call of Duty n QQ iOS n Quake HalfLife

© 2014 Exinda Networks, Inc. 23 Chapter 2: Predefined Applications and Application Groups

n QQ for Mac

n QQ for Pad Android

R

radius Real Media Replify RRP

radmin n RealMediaPlayer rFactor RSVP

RC5DES RedTube Rhapsody rsync RDP Remote Telnet RIP RTCP RealDataTransport Remote Web Workplace rlogin RTP Renren RTSP

S

Salesforce n ClearSea Slingbox Spreed

SAP n Ekiga SMS sqidproxy

SAP.MCAST.NET n ExpressTalk SMTP ssdp

SCTP n Facetime SSH

Scydo n Facetime iOS SnapMirror SSL

n Scydo Android n gooberVoIP SNMP n HTTPS

n Scydo iOS n Gizmo SOAP n IMAPS

Second Life n KPhone Socks n POP3S SecureSight n MagicJack/MagicTalk Socks v4 n SMTPS Socks v5 SecureSight-SSL n OpenWengo n SoftEthernet Shell-SSL n QuteCom SSTP SIP-SSL Shoutcast n SipGate StealthNet SOPCAST n Fishradio n Twinkle n iTunes n Vonage StreamWorks Silverlight n XMeeting STUN n iSoul SinaTV Skinny Sudaphone n Nicotine Plus Sina Weibo SkyDrive n Sudaphone Android n SolarSeek SIP Skype n Sudaphone iOS n SoulSeeX SIP-audio Skype-voice SugarSync Skype-out n pySoulSeek SIP-gadu-gadu SunRPC SIP-- Skype-video SPDY svrloc SIP-MagicJack n Skype Android SpiderOak Sybase SIP-mplus n Skype for iPad SplashFighter

© 2014 Exinda Networks, Inc. Chapter 2: Predefined Applications and Application Groups 24

SIP- n Skype iOS SyncServer-SSL

SIP-oscar n Skype n Spotify Android syslog SIP-oscar-video n Skype Symbian n Spotify Mac SIP-video Skype Video n Spotify iOS SIP-vonage SIP-yahoo Skype Voice SIP-yahoo-video

T

T.120 TeamSpeak Telnet Truphone

Tacacs n Teamspeak Linux Telnet-SSL n Truphone Android

Tango n Teamspeak Mac Teredo n Truphone Mac

Tango-audio n Teamspeak iOS textPlus n Truphone iOS Tango-video TeamViewer TFTP n Truphone iPad n Tango Android n TeamViewer Android TigerText n Tango iOS n TeamViewer Linux Timbuktu TVAnts Tango-IM n TeamViewer Mac Time Server TVUPlayer Tango-file-transfer n TeamViewer for iPad n TVUPlayer Android TDS n TeamViewer HD for n Tor Bundle n TVUPlayer Mac iPad Trendmicro n TVUPlayer iOS n TeamViewer for Meet- ings iPad

n TeamViewer iOS

n TeamViewer for Meet- ings iOS

U

Ubuntu Unreal uucp One Usenet UUSee UltraBac n iLoad UltraSurf n UseNeXT

V

vBulletin Vibe VoIP Tunnel Vcast Voxer Ventrilo Viber-audio Vippie VPN-X

© 2014 Exinda Networks, Inc. 25 Chapter 2: Predefined Applications and Application Groups

VeohTV Viber-file-transfer n Vippie Android VRRP

VeohTV-generic Viber- n Vippie iOS VTUN

VeohTV-flash n Viber Android VNC n VeohTV Web Player n Viber iOS

W

WAP WebQQ WhatsApp WinMX

WAP TLS WebSocket n WhatsApp Android n XNap

Warcraft 3 Webthunder n WhatsApp Symbian WebDAV n Thunder n WhatsApp iOS Wins n Cadaver WeChat Whois World of Kung Fu n Goliath WeChat-Generic World of Warcraft Webex WeChat-Voice Live Chat WSM Server WeChat-Video Call n WebEx Meeting Windows Azure WSM Server-SSL WeChat-Chat Center Applet Windows Updates WeChat-Data Message n Webex for iPad WindowsMedia WeChat-WebChat n Webex iOS

X

x400MTA XDCC xdmcp

xbox-live n XDCC Catcher Xing

n XDCC Fetcher XVideos

n XDCC XWindows

n mIRC

Y

Yahoo n Miranda Yahoo Games

Yahoo-voice n Pidgin Yahoo IM

Yahoo-file-transfer n Pidgin (previously Yahoo WebMail Yahoo-video Gaim) Yahoo-webchat n Qnext Yahoo-webmail n Trillian/Trillian Pro YouPorn n Adium n Web.de Mul- YourFreedom n Ayttm timessenger YouTube n GMX Multimessenger n Yahoo Messenger

n Instantbird n Yahoo Messenger

© 2014 Exinda Networks, Inc. Chapter 2: Predefined Applications and Application Groups 26

n Kopete Android

n Yahoo Messenger for Mac

n Yahoo Messenger iOS

Z

Zattoo Zoho Work Online

n HD iOS Zynga

n Zattoo iOS

© 2014 Exinda Networks, Inc. 27 Chapter 2: Predefined Applications and Application Groups

Predefined Application Groups The Exinda appliance includes predefined groups of applications that can be used when setting policy for the appliance and for monitoring. Custom application groups can also be defined, and custom applications can be added to existing application groups.

Note: A given application can exist in multiple application groups. However, monitored groups must not contain applications which are already a member of another group being monitored. Any given application can only be monitored within a single application group.

Database Services

MS-SQL PostgreSQL MySQL TDS Oracle

Exinda

ExindaAD ExindaCom ExindaWM ExindaSSL

File Services

Apple Talk NFS CIFS rsync FTP TFTP NCP

Games

Armagetron Fiesta Quake-HalfLife Warcraft 3 Battlefield Florensia rFactor Wii Call of Duty GTP SecondLife World of Kung Fu Club Penguin GuildWars SplashFighter World of Warcraft Crossfile Half-Life 2 Steam xbox-live Dofus MapleStory TeamSpeak Gamekit Doom3 PS3 Unreal QQGames

© 2014 Exinda Networks, Inc. Chapter 2: Predefined Applications and Application Groups 28

Instant Messaging

Blackberry Messenger Kik Messenger IMO WebQQ enLegion Meebo eBuddy WeChat Google Talk MPlus MSRP Wickr ICQ Webchat MSN textPlus Yahoo IM IM+ Oscar TigerText iMessage IRC PalTalk Vibe MQTT Jabber WhatsApp Voxer Hike Messenger DiDi IM

Interactive

BGP Remote Telnet Telnet DNS rlogin Time Server echo SSH

Mail

Blackberry Mail LotusNotes POP-SSL Gmail IMAP MAPI SMTP Hotmail IMAP-SSL POP Yahoo WebMail

P2P

ANts P2P Filetopia Open FT QQLive Ares Gadu-Gadu POP Soulseek BitTorrent Gnutella PPLive StealthNet Edonkey Kazaa-Fastrack PPSteam UUSEE Feidian Kontiki QQ Webthunder ZATTOO

Recreational

Anonymous Proxy iTunes UltraSurf Mig33 DirectDownload LinkedIn VoIP Tunnel Orkut Facebook Mojo WindowsMedia Tumblr

© 2014 Exinda Networks, Inc. 29 Chapter 2: Predefined Applications and Application Groups

Flash MySpace YourFreedon Xing Flickr RealMedia YouTube Sina Weibo Hotmail Snapchat JAP Instagram Spotify Audiogalaxy

Secure

DDM-SSL LDAP-SSL PPTP SyncServer-SSL FTP-SSL MS Global Catalogue SecureSight Tacacs HTTPS SSL Shell-SSL Telnet-SSL IMAP-SSL NNTP-SSL SIP-SSL WSM Server-SSL IRC-SSL Oracle-SSL SSH WAP TLS L2TP Orbix2000 SSL SSL POP-SSL

Social Networking

aimini Instagram Snapchat Hi5 iSkoot Twitter Orkut Facebook LinkedIn Yelp Tumblr Fickr MySpace YouTube Xing Friendster Renren Google Plus Sina Weibo

Software Updates

Adobe Updates Bitdefender Kaspersky OS Update Antivirus Lab Eset McAfee Apple Updates F-Prot Panda Security Avira Grisoft Windows Updates

Streaming

AVI LoveFilm Pandora Rhapsody Demand 5 MMS Quicktime Silverlight Channel 4oD Move Player RealDataTransport Soribada Flash MPEG RealMedia Funshion MyVideo RTSP Vimeo Icecast MyMusic TW Shoutcast iTunes Radio iPlayer Netflix VeohTV last.fm

© 2014 Exinda Networks, Inc. Chapter 2: Predefined Applications and Application Groups 30

IPTV Octoshape WindowsMedia ITV OGG Youku

Thin Client

Citrix PCAnywhere Spreed Webex GoToMeeting PCoIP TeamViewer xdmcp GoToMyPc RDP VNC XWindows AdobeConnect

Voice

Burner RTCP Skype Voice Vippie H323 RTP Skype Video DiDi Voice IAX SIP Facetime Megaco H.248 Skinny Sudaphone MGCP Skype Nimbuzz

VPN

GRE L2TP Teredo PDProxy HamachiVPN NetMotion VPN-X CyberGhost IPSEC OpenVPN ComodoUnite IPSEC over UDP PPTP SSTP isakmp SoftEthernet HTTPTunnel

Web

BOLT Live.com WebDAV Google Encrypted HTTP OperaMini WAP Google Cloud HTTP-ALT squidproxy SPDY Google Drive HTTPS WebSocket Google

Unified Communications

Goober Fring Tango Forfone Ventrilo ooVoo Truphone FiCall Scydo Lync

© 2014 Exinda Networks, Inc.