Applies To:Show Versions
- 11.6.5, 11.6.4, 11.6.3, 11.6.2, 11.6.1
Setting Up Application Visibility
Overview: Setting up application visibility
This implementation describes how to set up the Policy Enforcement Manager™ (PEM) to analyze application traffic on the network, and provide statistics for application visibility. For example, you can view statistics to see what applications are being used. By monitoring your traffic, you can later create enforcement policies that are tailored for your needs.
What is application visibility?
Policy Enforcement Manager™ (PEM™) gives the BIG-IP® system the ability to classify both encrypted and unencrypted traffic into categories for application visibility. You can display statistics about the network traffic in graphical charts, and view classification information by application, category, protocol, virtual server, country, type of device, and so on. In-depth information and application awareness provides visibility into your network infrastructure so you can identify and monitor different types of traffic and resolve performance issues.
Application visibility is particularly useful for service providers. If your organization is using RADIUS protocol for authentication, authorization, and accounting, PEM can intercept accounting messages to retrieve additional information, for example, about mobile devices, subscribers, towers, service plans, and manufacturers.
Charts shown on thescreens display the application visibility data. The classification overview is customizable so you can display the charts or tables that you want. The overview shows top statistics for the categories of which you are most interested.
Determining and adjusting traffic classifications
On the Main tab, click
. The Classification screen opens showing a list of the supported classification categories.
- To view the applications in each category, click the + icon next to the category.
To view or edit the properties of the application or category, click the name
to open its properties screen.
Tip: Here you can view the application or category ID number.
Adjust the properties of the application or category, if necessary.
- In the Description field, you can add text to describe the application or category.
- Set State to Enabled to use this classification, or to Disabled not to use it.
- For categories only, set iRule Eventto Enabled if you want the system to trigger an iRule event when it recognizes traffic in this category, or set to Disabled if you do not.
- In the Category or Application List field, you can change which category an application is in, or which applications are in the category.
- Click Update to save any changes.
Creating a data plane virtual group
On the Main tab, click
.The Listeners screen opens.
Click Data Plane.
The Data Plane screen opens.
Click Add Group.
The New Virtual Group screen opens.
- In the Name field, type a unique name for the listener.
In the Destination Address field, type the IP address of the
virtual server. For example, 10.0.0.1 or
Note: When you use an IPv4 address without specifying a prefix, the BIG-IP® system automatically uses a /32 prefix.Tip: You can use a catch-all virtual server (0.0.0.0) to specify all traffic that is delivered to the BIG-IP® system. Configure the source and destination setting, during forwarding mode only. In the relay mode, the client does not have an IP address and the DHCP provides the client with an IP address.The system will create a virtual server using the address or network you specify.
- For the Service Port setting, type or select the service port for the virtual server.
- From the VLAN and Tunnel Traffic list, select Enabled on. Then, for the VLANs and Tunnels setting, move the VLAN or VLANs on which you want to allow the virtual servers to share traffic from the Available list to the Selected list.
- For the VLANs and Tunnels setting, move the VLANs and tunnels that you want to monitor from the Available list to the Selected list.
In the Policy Provisioning area, select enforcement policies to apply to the
The system applies the global policy to all subscribers in parallel with the subscriber policies, and must be configured with unknown subscriber policy. High-precedence global policies override conflicting subscriber policies, and low-precedence policies are overridden by conflicting subscriber policies.
For Global Policy, move policies to apply to all subscribers
to High Precedence or Low Precedence.
Note: For URL categorization to take effect, you need to associate the enforcement policy with a classification profile.
- For Unknown Subscriber Policy, move policies to use if the subscriber is unknown to Selected.
- For Global Policy, move policies to apply to all subscribers to High Precedence or Low Precedence.
The Policy Enforcement Manager creates a listener.
Examining application visibility statistics
On the Main tab, click
.The Overview screen opens where you can view a summary of the top classification statistics.
Review the statistics provided. To quickly change the format of the information, click
the icon to the left of the time period.
You can display information in a table, line chart, pie chart, or bar chart.
- Click the time period (Last Hour, Last Day, Last Week, Last Month, or Last Year), to change the interval used for displaying content.
- To permanently change the format or content of any of the charts, click the cog on the chart, select Settings, and adjust the fields in the form.
To display additional charts or tables, click the Add Widget link
and complete the form.
The chart you create becomes a permanent part of the Classification Overview screen.
On the Main tab, click Policy Enforcement
The Statistics screen opens and the charts display detailed classification statistics by application.
Adjust the statistics content in any of the following ways:
- Use the View By setting or Advanced Filters to change the type of classification data shown.
- Use the Time Period setting to change the interval for which statistics are shown.
- Use the Expand Advanced Filters setting to fine-tune even further which types of reports to display.
Get detailed information in any of the following ways:
The easiest way to learn what classification information is available is to look at the charts and view the content and details in different ways. As you drill down into the statistics, you can locate more details and view information for a specific item.
- Point on the charts to display the details.
- Review the Details table to see the statistics.
- In the Details table, click the name of one of the items (application, category, protocol, and so on) to see classification details about that specific item.
- Use the Display method setting to show statistics in different formats.
To generate and export a PDF or CSV file of a report to save or email, click
Export, select the settings, and fill in the appropriate
Note: You must have an SMTP email server configured to use the email option. On the Main tab, click .