ActiveX Control

One of the most useful capabilities of Application Control is the ability to distinguish between different types of ActiveX or Flash network traffic. This allows you to block games while permitting Windows updates. Prior to Application Control, you could configure SonicOS to block ActiveX with Security Services > Content Filter, but this blocked all ActiveX controls, including your software updates.

Application Control achieves this distinction by scanning for the value of classid in the HTML source. Each type of ActiveX has its own class ID, and the class ID can change for different versions of the same application.

Some ActiveX types and their classids are shown in ActiveX Types and Classids.

 

ActiveX Types and Classids

ActiveX Type

Classid

Apple Quicktime

02BF25D5-8C17-4B23-BC80-D3488ABDDC6B

Adobe Flash v6, v7

D27CDB6E-AE6D-11cf-96B8-444553540000

Adobe Shockwave

D27CDB6E-AE6D-11cf-96B8-444553540000

Microsoft Windows Media Player v6.4

22d6f312-b0f6-11d0-94ab-0080c74c7e95

Microsoft Windows Media Player v7-10

6BF52A52-394A-11d3-B153-00C04F79FAA6

Real Networks Real Player

CFCDAA03-8BE4-11cf-B84B-0020AFBBCCFA

Sun Java Web Start

5852F5ED-8BF4-11D4-A245-0080C6F74284

Example of ActiveX-Type Match Object shows an ActiveX-type match object that is using the Adobe Shockwave class ID. You can create a policy that uses this match object to block online games or other Adobe Shockwave-based content.

Example of ActiveX-Type Match Object

You can look up the class ID for these Active X controls on the Internet, or you can view the source in your browser to find it. For example, Example Source File for Shockwave or Flash shows a source file with the class ID for Adobe Shockwave or Flash.

Example Source File for Shockwave or Flash