
Contents
viii
Cisco PIX Firewall and VPN Configuration Guide
78-15033-01
Downloading Access Lists 3-20
Configuring Downloadable ACLs 3-20
Downloading a Named Access List 3-21
Downloading an Access List Without a Name 3-22
Software Restrictions 3-23
Simplifying Access Control with Object Grouping 3-24
How Object Grouping Works 3-24
Using Subcommand Mode 3-25
Configuring and Using Object Groups with Access Control 3-26
Configuring Protocol Object Groups 3-28
Configuring Network Object Groups 3-28
Configuring Service Object Groups 3-28
Configuring ICMP-Type Object Groups 3-29
Nesting Object Groups 3-29
Displaying Configured Object Groups 3-30
Removing Object Groups 3-30
Filtering Outbound Connections 3-31
Filtering ActiveX Objects 3-31
Filtering Java Applets 3-32
Filtering URLs with Internet Filtering Servers 3-32
Overview 3-32
Identifying the Filtering Server 3-33
Buffering HTTP Replies for Filtered URLs 3-34
Filtering Long URLs with the Websense Filtering Server 3-34
Filtering HTTPS and FTP Sites 3-34
Configuring Filtering Policy 3-35
Filtering Long URLs 3-36
Viewing Filtering Statistics and Configuration 3-36
Configuration Procedure 3-38
CHAPTER
4 Using PIX Firewall in SOHO Networks 4-1
Using PIX Firewall as an Easy VPN Remote Device 4-1
Overview 4-2
Establishing Network Connectivity 4-4
Basic Configuration Procedure 4-4
Viewing Downloaded Configuration 4-5
Controlling Remote Administration 4-6
Commentaires sur ces manuels