|
Desktop software inventory can classify packets based on Layer 4 through Layer 7 protocols, which dynamically assign TCP/UDP ports. By looking beyond the TCP/UDP port numbers of a packet (known as subport classification), NBAR examines the packet payload itself and classifies packets on the payload content, such as transaction identifiers, message types, or other similar data. For example, HTTP traffic can be classified by URLs or Multipurpose Internet Mail Extension (MIME) types using regular expressions within the CLI
NBAR also can classify Citrix Independent Computing Architecture (ICA) traffic and can perform subport classification of Citrix traffic based on Citrix published applications. Requests from Citrix ICA clients can be monitored for a published application that is destined for a Citrix ICA master browser. After receiving the client requests to the published application, the Citrix ICA master browser directs the client to the server with the most available memory. The Citrix ICA client then connects to this Citrix ICA server for the desktop software inventory application
|