Appendix B: Implicitly Allowed Application Dependencies

Allowed Application software-update apps business-systems apps (e.g., erp-crm, storage-backup, sharepoint) web-mail apps, IMs, social-networking

Implicitly Allowed Application Dependency web-browsing

Apps identified in rpc decoder with a specific program ID (e.g., mount, nfs, portmapper, ibm-clearcase) Apps identified in msrpc decoder with specific UUID (e.g., msexchange, active-directory, arcserve) msrpc ms-ds-smb Apps identified in rtsp decoder based on uri path in first request message (including custom apps) Apps identified in rtmp decoder based on uri path in the first request packet (e.g., bbc-iplayer) Media streaming apps (e.g., napster, megavideo) ms-rdp, msn-remote-desktop

rpc msrpc ms-ds-smb netbios-ss rtsp rtmp, rtmpt flash t.120

Apps identified based on SSL hello or certificate in the response. ssl Ssh can remain in both uses-apps and implicit-uses-apps yahoo-voice, gtalk-voice, msn-voice, msn-video, facetime several IM apps gotomeeting, gotomypc, gotoassist Customer is not expected to understand internals about Citrix ICA/Jedi stun jabber citrix/citrix-jedi

Appendix B Page 1

Appendix B Page 2