Cisco PIX 500 Series Configuration Manual page 683

Chapter 30 Configuring Connection Profiles, Group Policies, and Users
Clientless SSL VPN sessions do not use ACLs defined in the vpn-filter command.
Note
The following example shows how to set a filter that invokes an access list named acl_in for the group
policy named FirstGroup:
hostname(config)# group-policy FirstGroup attributes
hostname(config-group-policy)# webvpn
hostname(config-group-webvpn)# filter acl_in
hostname(config-group-webvpn)#
Applying a URL List
You can specify a list of URLs to appear on the clientless SSL VPN home page for a group policy. First,
you must create one or more named lists by entering the url-list command in global configuration mode.
To apply a list of servers and URLs for clientless SSL VPN sessions to a particular group policy,
allowing access to the URLs in a list for a specific group policy, use the name of the list or lists you
create there with the url-list command in group-policy webvpn configuration mode. There is no default
URL list.
To remove a list, including a null value created by using the url-list none command, use the no form of
this command. The no option allows inheritance of a value from another group policy. To prevent
inheriting a URL list, use the url-list none command. Using the command a second time overrides the
previous setting:
hostname(config-group-webvpn)# url-list {value
hostname(config-group-webvpn)# no url-list
Table 30-5
Table 30-5
Parameter
index
none
value name
The following example sets a URL list called FirstGroupURLs for the group policy named FirstGroup
and specifies that this should be the first URL list displayed on the homepage:
hostname(config)# group-policy FirstGroup attributes
hostname(config-group-policy)# webvpn
hostname(config-group-webvpn)# url-list value FirstGroupURLs 1
hostname(config-group-webvpn)#
Enabling ActiveX Relay for a Group Policy
ActiveX Relay lets a user who has established a Clientless SSL VPN session use the browser to launch
Microsoft Office applications. The applications use the session to download and upload Microsoft Office
documents. The ActiveX relay remains in force until the Clientless SSL VPN session closes.
To enable or disable ActiveX controls on Clientless SSL VPN sessions, enter the following command in
group-policy webvpn configuration mode:
OL-12172-03
shows the url-list command parameters and their meanings.
url-list Command Keywords and Variables
Meaning
Indicates the display priority on the home page.
Sets a null value for url lists. Prevents inheriting a list from a default or
specified group policy.
Specifies the name of a previously configured list of urls. To configure such
a list, use the url-list command in global configuration mode.
name
| none} [ index ]
Cisco Security Appliance Command Line Configuration Guide
Group Policies
30-67