Activex Blocking; Configuring Web Filtering; Configuring Url Address Filtering - HP A6600 Configuration Manual

ActiveX blocking

ActiveX blocking can protect networks from being attacked by malicious ActiveX plugins.
After the ActiveX blocking function is enabled, requests for ActiveX plugins to all webpages are filtered.
If the ActiveX plugins in some webpages are expected, configure ACL rules to permit requests to the
ActiveX plugins of these webpages.
Processing procedure
If the ActiveX blocking function is enabled but no ACL is configured for it, the router replaces suffix
•
".ocx" with ".block" in all web requests and then forwards the requests.
If the ActiveX blocking function is enabled and an ACL is configured for it, the router determines
•
whether to replaces suffix ".ocx" with ".block" in web requests according to the ACL rules. If the
destination server in a web request is a server permitted by the ACL, no replacement occurs, and
the request is forwarded. Otherwise, the suffix is replaced with ".block," and then the request is
forwarded.
In addition to the default suffix ".ocx," add ActiveX blocking suffixes (that is, the filename suffixes to
•
be replaced in web requests) through command lines.

Configuring web filtering

IP address-supported URL filtering can take effect only after the URL address filtering is enabled. URL
parameter filtering, Java blocking, and ActiveX blocking can be enabled independently.

Configuring URL address filtering

To do...
1. Enter system view.
2. Enable the URL address
filtering function.
3. Specify the default filtering
action.
4. Add a URL address filtering
entry.
5. Display information about
URL address filtering.
Command...
system-view
firewall http url-filter host enable
firewall http url-filter host default {
deny | permit }
firewall http url-filter host url-
address { deny | permit } url-
address
display firewall http url-filter host [
all | item keywords | verbose ] [ |
{ begin | exclude | include }
regular-expression ]
376
Remarks
—
Required.
Disabled by default.
Optional.
deny by default.
Required.
Optional.