liveBook · Manning

Application visibility and control

As explained in Acing the CCNA Exam: Volume 2 Advanced Networking and Security

Application Visibility and Control is a traffic-inspection capability that identifies applications by examining packet attributes and contents.

Application Visibility and Control (AVC) lets a next-generation firewall identify traffic by examining packet attributes and contents, not only source, destination, and port information. section 11.5.2

AVC extends stateful packet filtering by recognizing applications within network traffic. Its inspection role is similar to Network-Based Application Recognition (NBAR), while the surrounding NGFW can also integrate malware protection and intrusion prevention. section 11.5.2 section 11.6

How Acing the CCNA Exam: Volume 2 Advanced Networking and Security covers it

How deep it goes
Defines packet-content inspection and its relationship to stateful filtering, but does not detail configuration or verification.
Examples
Uses source addresses, destination addresses, ports, and packet contents as application-identification inputs.
What it assumes
Assumes familiarity with traditional and stateful firewalls, while distinguishing application inspection from basic packet filtering.
What you can do after
Evaluate how an NGFW distinguishes applications from conventional address-and-port traffic classification.
How it connects
Connects application identification with next-generation firewalls, stateful packet filtering, NBAR, malware protection, and intrusion prevention.

This explainer was generated by Manning's knowledge graph from the text of Acing the CCNA Exam: Volume 2 Advanced Networking and Security. The section links point to the parts of the book it draws on.