Solutions

Classify a group of websites with similar domain names

Solutions ID:    KB4069
Version:    1.0
Status:    Published
Published date:    09/29/2010
 

Problem Description

I want to create classes that classify traffic from websites with similar domain names. For example, the website with the following domain name should get different priority:

com.my
com.sg
co.jp

Resolution

In the following example, an HTTP class is created. Child classes are then created with different domain names to further classify the traffic using the HTTP Criterion feature (Web:URL) in PacketShaper.

CLI:

class new /Inbound/HTTP COMMY nodefault inside host:any TCP service:Client outside host:any service:HTTP "Web:url:*.com.my*"

class rule add /Inbound/HTTP/COMMY inside host:any TCP service:HTTP "Web:url:*.com.my*" outside host:any service:Client

class new /Outbound/HTTP COMMY nodefault inside host:any TCP service:Client outside host:any service:HTTP "Web:url:*.com.my*"

class rule add /Outbound/HTTP/COMMY inside host:any TCP service:HTTP "Web:url:*.com.my*" outside host:any service:Client

 

class new /Inbound/HTTP COMSG nodefault inside host:any TCP service:Client outside host:any service:HTTP "Web:url:*.com.sg*"

class rule add /Inbound/HTTP/COMSG inside host:any TCP service:HTTP "Web:url:*.com.sg*" outside host:any service:Client

class new /Outbound/HTTP COMSG nodefault inside host:any TCP service:Client outside host:any service:HTTP "Web:url:*.com.sg*"

class rule add /Outbound/HTTP/COMSG inside host:any TCP service:HTTP "Web:url:*.com.sg*" outside host:any service:Client

 

A screenshot showing how it can be configured using the Legacy UI.

 

Notes:

  • The asterisk (*) mark serves as a wildcard in this scenario, meaning if  ".com.sg" appears in any part of the web URL, it will be classified under the COMSG class.
  • PacketWise examines only the first 128 bytes of the URL in a flow.
  • Only one URL can be specified per matching rule.

 

 


Rate this Page

Please take a moment to complete this form to help us better serve you.

Did this document help answer your question?
 
 
If you are finished providing feedback, please click the RATE CONTENT button. Otherwise, please add more detail in the following text box and then click RATE CONTENT.
 
 

Your response will be used to improve our document content.

Ask a Question