exception application

Function

The exception application command configures an exception response action for files transmitted using the specified application.

The undo exception application command cancels the application exception of an application or all applications.

Format

exception application name name [ action { alert | allow | block } ]

undo exception application name { name | all }

Parameters

Parameter	Description	Value
name name	Specifies the name of the application requiring a different response action.	The value is a string of 1 to 32 characters. It can contain only case-insensitive letters, digits, underscores (_), and periods (.).
action { alert \| allow \| block }	Specifies the response action.	The response action falls into the following types (the default value is block): alert: The system permits files and generates logs. allow: The system permits files. block: The system terminates sessions and generates logs.
all	Cancels the application exception of all applications.	-

Views

Antivirus profile view

Default Level

2: Configuration level

Usage Guidelines

If no response action is configured, the default action block takes effect.

An application refers to the application program for performing a task or providing a service.

Applications use a certain protocol for data transmission, and one protocol can bear multiple applications. The configured response action for applications and protocols takes effect based on the following rules:

If you configure the response action only for the protocol, the response action applies to all applications using this protocol.
If you configure response actions for both the protocol and the application, the response action for the application takes effect.

For example, both applications Netease_Webmail and Yahoo_WebMail use HTTP to provide services. If you configure the response action for HTTP as block, the response action block takes effect on both Netease_Webmail and Yahoo_WebMail. If you need to configure an exception for Netease_Webmail, configure the response action for Netease_Webmail as alert in Application Exception. Then the response action for Yahoo_WebMail is block whereas the response action for Netease_Webmail is alert.

Example

# Create profile av_application, configure virus detection for mail attachments downloaded from Yahoo.com in the profile, and set the response action to block.

<sysname> system-view
[sysname] profile type av name av_application
[sysname-profile-av-av_application] exception application name Yahoo_WebMail action block