The CP Security Appliance identifies applications at layer 7 with deep packet scanning to look into the packet payload (not just the header or source IP). This ensures packets are identified correctly. Once a packet is identified, it can be controlled by the policies you implement in your CP Security Appliance. Policies include bandwidth limits, dynamic priority controls as well as full block capabilities.