Configuring Application Filter; Application Filter Configuration Parameters; Table 9.7. Application Filter Configuration Parameters - Asus Internet Security Router User Manual

Internet Security Router User's Manual
„ NAT Pools – This option allows you to configure NAT Pools that will ensure mapping of the internal IP
address to public IP address. Configure NAT Pools here before attaching them to policies.
„ Time Ranges – This option allows you to configure time-windows for user-access to the networks
across the Internet Security Router.
9.7.1

Configuring Application Filter

Application filter allows network administrator to block, monitor, and report on network users' access to non-
business and objectionable content. This high-performance content access control results in increased
productivity, lower bandwidth usage and reduced legal liability.
The Internet Security Router has the ability to handle active content filtering on certain application protocols
such as HTTP, FTP, SMTP and RPC.
„ HTTP – You can define HTTP extension based filtering schemes for blocking
ActiveX – *.ocx
Java Archive – *.jar
Java Applets – *.class
Microsoft Archives – *.msar
Other URLs based on file extensions.
„ FTP – allows you to define and enforce the file transfer policy for the site or group of users
„ SMTP – allows you to filter operations such as VRFY, EXPN, etc. which reveal excess information
about the recipient.
„ RPC – allows you to filter programs based on the assigned RPC program numbers.
9.7.1.1

Application Filter Configuration Parameters

Table 9.7 describes the configuration parameters available for application filter.
Field
Filter Type
Filter Name
Protocol
Port
Log
This option includes buttons to enable and disable logging for this Application Filter.
Enable
Disable
Action
Allow
Deny
Filter Commands
This section allows you to enter a command for the respective application. The list of supported
commands per application is as follows:
FTP Commands

Table 9.7. Application Filter Configuration Parameters

Description
Select the type of filter: FTP, HTTP, RPC and SMTP.
Enter a name for the filter.
Select the protocol that Application Filter uses (TCP/UDP).
Enter the port number that the Application Filter uses.
Select this option to enable logging for this application filter.
Select this option to disable logging for this application filter.
Select this option to configure the rule as an "allow" rule. This rule when
bound to the Firewall will allow matching packets to pass through.
Select this option to configure the rule as a "deny" rule. This rule when
bound to the Firewall will not allow matching packets to pass through.
Add the following command to an FTP filter to:
Chapter 9. Configuring Firewall/NAT Settings
67