Cisco Systems CL-28826-01 Security Camera User Manual


  Open as PDF
of 2616
 
18-9
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 18 Managing Firewall Web Filter Rules
Configuring Web Filter Rules for ASA, PIX, and FWSM Devices
Edit Web Filter Options Dialog Box
Use the Edit Web Filter Options dialog box to edit the filtering options defined for a web filter rule for
ASA, PIX, and FWSM devices.
The options displayed on this dialog box differ depending on the type of filtering configured for the rule.
For some types, there are no options and the dialog box is empty. The reference table below includes all
possible options.
Navigation Path
Right-click the Options cell in a web filter rule for ASA/PIX/FWSM (on the Web Filter Rules Page
(ASA/PIX/FWSM), page 18-3) and select Edit Web Filter Type. You can edit the type for one row at a
time.
Field Reference
Type The type of traffic that should be filtered (or exempted from filtering)
for this rule. For filtering that uses an external server, consult the
documentation for your version of the server to determine if it supports
that type of filtering. Configure the filtering server on the Web Filter
Settings Page, page 18-16.
URL—HTTP traffic. Filtering is done using an external filtering
server.
HTTPS—HTTPS traffic. This does not include traffic associated
with an SSL VPN. Filtering is done using an external filtering
server.
Java—Remove Java applets from HTTP traffic if they are identified
on applet tags. The rule does not remove Java applets from SSL
VPN traffic. If the applet tag spans packets, or the code in the tags
is larger than the MTU, the Java applet is not removed.
ActiveX—Remove ActiveX or Java applets from HTTP traffic. The
rule removes any item within object or applet tags, which might
also remove images and multimedia objects. The rule might not
remove applets from SSL VPN traffic. If the object tag spans
packets, or the code in the tags is larger than the MTU, the object
is not removed.
FTP—FTP traffic. Filtering is done using an external filtering
server.
Table 18-3 Edit Web Filter Type Dialog Box (Continued)
Element Description
Table 18-4 Edit Web Filter Options Dialog Box
Element Description
Allow traffic if URL Filter
Server unavailable
(URL, FTP, HTTPS only)
Whether to permit unfiltered traffic on outbound connections if all of
the URL filtering servers are unavailable. If you do not select this
option, all affected outbound traffic (HTTP, FTP, or HTTPS) is blocked
until at least one filtering server becomes available.