FortiGate's IPS protocol decoders analyze network transmission patterns and application signatures to identify and block malicious traffic. Application Control is the feature that allows FortiGate to detect, classify, and block applications based on their behavior and signatures, even when they do not rely on traditional URLs.
Application Control works alongside IPS protocol decoders to inspect packet payloads and enforce security policies based on recognized application behaviors. It enables granular control over non-URL-based applications such as P2P traffic, VoIP, messaging apps, and other non- web-based protocols that IPS can identify through protocol decoders. IPS and Application Control together can detect evasive or encrypted applications that might bypass traditional firewall rules.