You should take into account that a lot of connections will significantly increase memory and CPU usage. Allocated memory is freed and the protocol is considered unknown. If the pattern is not found in the collected data, the matcher stops inspecting further. L7 matcher collects the first 10 packets of a connection or the first 2KB of a connection and searches for the pattern in the collected data. Use other features to block webpages by URL. This will almost never work correctly and your device will exhaust its resources, trying to catch all the traffic. It is not recommended to use the L7 matcher for generic traffic, such as for blocking webpages. Use this feature only for very specific traffic. ![]() The L7 matcher is very resource-intensive.
0 Comments
Leave a Reply. |