Cisco PIX 525 Spécifications télécharger pdf (Page 144)

3-32

Cisco PIX Firewall and VPN Configuration Guide

78-15033-01

Chapter 3 Controlling Network Access and Use

Filtering Outbound Connections

Filtering Java Applets

The filter java command filters out Java applets that return to the PIX Firewall from an outbound

connection. The user still receives the HTML page, but the web page source for the applet is commented

out so that the applet cannot execute. The syntax of the command for filtering Java applets is as follows:

filter java port[-port] local_ip mask foreign_ip mask

Use 0 for the local_ip or foreign_ip IP addresses to mean all hosts.

Note If Java applets are known to be in <object> tags, use the filter activex command to remove them.

Examples

To specify that all outbound connections have Java applet blocking, use the following command:

filter java 80 0 0 0 0

This command specifies that the Java applet blocking applies to web traffic on port 80 from any local

host and for connections to any foreign host. To block downloading of Java applets to a host on a

protected network, enter a command like the following:

filter java http 192.168.3.3 255.255.255.255 0 0

This command prevents host 192.168.3.3 from downloading Java applets.

Filtering URLs with Internet Filtering Servers

This section describes how to enable URL filtering. It contains the following topics:

• Overview, page 3-32

• Identifying the Filtering Server, page 3-33

• Buffering HTTP Replies for Filtered URLs, page 3-34

• Filtering Long URLs with the Websense Filtering Server, page 3-34

• Filtering HTTPS and FTP Sites, page 3-34

• Configuring Filtering Policy, page 3-35

• Filtering Long URLs, page 3-36

• Viewing Filtering Statistics and Configuration, page 3-36

• Configuration Procedure, page 3-38

Overview

The filter url command lets you designate webs traffic that is to be filtered using one of the following

URL filtering applications:

• Websense Enterprise web filtering application—Supported by PIX Firewall Version 5.3 or higher

• Filtering by N2H2 for IFP-enabled devices—Supported by PIX Firewall Version 6.2 or higher

1 2 ... 139 140 141 142 143 144 145 146 147 148 149 ... 465 466

Pas de commentaire

Cisco PIX 525 Spécifications Page 144