Slicing and Masking in Application Filtering Intelligence

When the traffic passes through the Application Filtering Intelligence, application metadata is created. With the addition of slicing and masking parameters to the existing application filtering functionality, you will be able to slice, mask, or slice and mask the filtered packets before sending them to the destination tunnel endpoint.

For step-by-step instructions on how to configure Application Filtering Intelligence refer to Create Application Filtering Intelligence by Editing Monitoring Session from Dashboard.

Configuring Application Filtering Intelligence with Slicing

You can enable the slicing configuration and provide inputs for each Application Filtering rule set:

  1. From the Select a Protocol drop-down list, choose a protocol.
  2. In the Offset field, specify the length of the packet that must be sliced.

The filtered traffic will be sliced before forwarding it to the destination tunnel endpoint.

Refer to Slicing for more detailed information on Slicing.

Configuring Application Filtering Intelligence with Masking

You can enable the masking configuration and provide inputs for each Application Filtering rule set:

  1. From the Select a Protocol drop-down list, choose a protocol.
  2. In the Offset field, specify the length of the packet that must be masked.
  3. In the Pattern field, enter the pattern for masking the packet.
  4. In the Length field, enter the length of the packet that must be masked.

The filtered traffic will be masked before forwarding it to the destination tunnel endpoint.

Refer to Masking for more detailed information on Masking.

Configuring Application Filtering Intelligence with Slicing and Masking

You can enable both slicing and masking configurations, and provide inputs for each Application Filtering rule set.

The filtered traffic will be sent to the slicing application, the sliced traffic will be sent to masking application and then to the destination tunnel Endpoint.

Note:  When combining slicing and masking operations, the offset range of the masking must be lesser than the offset value entered for the slicing operation, as the slicing operation is performed first.