Support Center > Search Results > SecureKnowledge Details
The Custom_Application_Site object is categorized as "Medium Risk" Technical Level
Symptoms
  • The Custom_Application_Site object is categorized as "Medium Risk", and it matches the Application Control/URL Filtering rules which includes "Medium Risk". It happens even though Custom_Application_Site object is not used.

     

Cause

R77.30 the default was 0 (Unknown) and in R80.10 the default is 3 (Medium Risk).

[Expert@SA-R8010:0]# cat /opt/CPsuite-R80/fw1/appi/update/appi_user_db.C
(
        :appi_applications (
                : (
                        :id (1073741834)
                        :name ("Check Point")
                        :description ()
                        :risk (3)
                        :creation_date (1542847916)
                        :match_override (false)
                        :priority (1000)
                        :attributes (0)
                        :signatures (
                                : (
                                        :sig_pattern (
                                                :LSS ()
                                                :pattern ("^https?://www\.checkpoint\.com")
                                                :rule ()
                                                :type (simple_pattern)
                                        )
                                        :context (142)
                                        :attributes (0)
                                        :match_dependency ()
                                        :type (simple_signature)
                                        :sig_id (0)
                                        :app_sig_id (1073741834)
                                )
                        )
                        :category ()
                        :properties (
                                : (
                                        :id (1073741824)
                                )
                                : (
                                        :id (51000003)
                                )
                        )
                )
        )
        :appi_properties (
                : (
                        :id (51000003)
                        :name ("Medium Risk")
                        :risk (0)
                        :priority (500)
                )
                : (
                        :id (1073741824)
                        :name ("Custom Application/Site")
                        :risk (0)
                        :priority (500)
                )
        )
)


Solution
Note: To view this solution you need to Sign In .