Context Profiles are used in firewall rules.

There are three attributes for use in context profiles: App Id, Domain (FQDN) Name, and URL Categories. Select App Ids can have one or more sub attributes, such the TLS_Version and CIPHER_SUITE. Both App Id and FQDN can be used in a single context profile. Multiple App Ids can be used in the same profile. One App Id with sub attributes can be used - sub attributes are cleared when multiple App Id attributes are used in a single profile.

Both system defined and user defined Fully Qualified Domain Names (FQDNs) are supported. You can see the list of FQDNs when you add a new context profile of attribute type Domain (FQDN) Name. You can also see a list of FQDNs, and where they are used by navigating to Inventory > Context Profiles > FQDNs.

Procedure

  1. Select Inventory > Context Profiles.
  2. Click Add Context Profile.
  3. Enter a Profile Name, and optional Description.
  4. In the Attributes column, click Set.
  5. Click Add Attribute, and select one or more attributes from the drop-down menu: App ID, URL Category, or Domain (FQDN) Name.
    App ID
    1. To view available App Ids, scroll down the list, or select Attributes (App IDs).
    2. Click Add.
    URL Category
    1. Select one or more URL categories. To view available URL categories, scroll down the list, or select URL Categories.
    2. Click Add.
    3. Click Apply.
    Domain (FQDN) Name Select a system or user-defined FQDN. To create a user-defined FQDN:
    1. Click the three dot menu and select Add FQDN.
    2. Enter the domain name in the form *.[hostname].[domain]. For example, *.abracadabra.com. Do not include http:// or any other header.
    3. Click Save. The newly created FQDN appears in the attribute value column.
    4. Search and add additional FQDNs.
    5. Click Apply.
  6. (Optional) If you have selected an attribute with sub attributes such as SSL or CIFS, click Set in the Sub Attributes/Values column.
    1. Click Add Sub Attribute and select TLS_VERSION, TLS_CIPHER_SUITE, or CIFS_SMB_VERSION.
    2. Select one or more sub attributes.
    3. Click Add. Another sub attribute can be added by clicking Add Sub Attribute.
    4. Click Apply.
  7. Click Add.
  8. (Optional) To add another type of attribute, click Add Attribute again.
  9. Click Apply.
  10. (Optional) Enter a tag or scope. See Tags for more information.
  11. Click Save.

What to do next

Apply this context profile to a layer 7 distributed firewall rule (for layer 7 or Domain name), or gateway firewall rule (for layer 7).