ASPF configuration example ······························································································································ 354

Configuring ALG ····················································································································································· 356

Enabling ALG ······························································································································································· 358

ALG configuration examples ······································································································································ 358

FTP ALG configuration example ························································································································ 358

SIP/H.323 ALG configuration example ··········································································································· 359

NBT ALG configuration example ······················································································································· 360

Configuring session management ·························································································································· 361

Session management principle ·························································································································· 361

Implementation ···················································································································································· 361

Configuration task list ·················································································································································· 362

Setting protocol state-based session aging times ····························································································· 362

Configuring application layer protocol type-based session aging times ······················································ 363

Configuring session early aging ························································································································ 363

Setting the maximum number of sessions allowed to be established ···························································· 364

Enabling checksum verification ·························································································································· 364

Specifying the persistent session rule ················································································································ 365

Clearing sessions manually ································································································································ 365

Configuring session logging ······································································································································· 365

Enabling session logging···································································································································· 365

Setting session logging thresholds ····················································································································· 366

Configuring session log export ·························································································································· 366

Displaying and maintaining session management ··································································································· 368

Configuring connection limit ·································································································································· 370

Creating a connection limit policy ····························································································································· 370

Configuring the connection limit policy ····················································································································· 370

Configuring an IP address-based connection limit rule ··················································································· 370

Applying the connection limit policy ·························································································································· 371

Displaying and maintaining connection limiting ······································································································ 371

Connection limit configuration example ···················································································································· 371

Troubleshooting connection limiting ··························································································································· 373

Connection limit rules with overlapping segments ··························································································· 373

Connection limit rules with overlapping protocol types ·················································································· 373

Configuring web filtering ······································································································································· 374

URL address filtering ··········································································································································· 374

IP address-supported URL address filtering ······································································································· 374

URL parameter filtering ······································································································································· 375

Java blocking ······················································································································································· 375

ActiveX blocking ·················································································································································· 376

Configuring URL address filtering ······················································································································ 376

Configuring IP address-supported URL address filtering ················································································· 377

Configuring URL parameter filtering ·················································································································· 377

Configuring Java blocking ································································································································· 378

Configuring ActiveX blocking ···························································································································· 378

Displaying and maintaining web filtering ················································································································· 379

Web filtering configuration examples ······················································································································· 379

URL address filtering configuration example ···································································································· 379

URL parameter filtering configuration example ································································································ 381

Java blocking configuration example ··············································································································· 382

Troubleshooting web filtering ····································································································································· 383

Failure to add filtering entry or suffix keyword due to upper limit ································································· 383

Table of Contents