Cisco ASA 5505 Configuration Manual page 1481

Chapter 67 Clientless SSL VPN
By default, the security appliance rewrites, or transforms, all clientless traffic. You might not want some
applications and web resources (for example, public websites) to go through the adaptive security
appliance. The adaptive security appliance therefore lets you create rewrite rules that let users browse
certain sites and applications without going through the adaptive security appliance. This is similar to
split-tunneling in an IPSec VPN connection.
You can create multiple rewrite rules. The rule number is important because the security appliance
searches rewrite rules by order number, starting with the lowest, and applies the first rule that matches.
"Example Content Rewrite
Fields
Content Rewrite
•
–
–
–
–
• Add/Edit—Click to add a rewrite entry or edit a selected rewrite entry.
• Delete—Click to delete a selected rewrite entry.
Modes
The following table shows the modes in which this feature is available:
Firewall Mode
Routed
•
Add/Edit Content Rewrite Rule
Enable content rewrite—Click to enable content rewrite for this rewrite rule.
•
Rule Number—(Optional) Enter a number for this rule. This number specifies the priority of the
•
rule, relative to the others in the list. Rules without a number are at the end of the list. The range is
1 to 65534.
Rule Name—(Optional) Provide an alphanumeric string that describes the rule, maximum 128
•
characters.
Resource Mask—Enter a string to match the application or resource to apply the rule to. The string
•
can be up to 300 characters. You can use one of the following wildcards, but you must specify at
least one alphanumeric character.
* — Matches everything. ASDM does not accept a mask that consists of a * or *.*
? —Matches any single character.
[!seq] — Matches any character not in sequence.
[seq] — Matches any character in sequence.
OL-20339-01
Rules" shows example content rewrite rules.
Rule Number—Displays an integer that indicates the position of the rule in the list.
Rule Name—Provides the name of the application for which the rule applies.
Rewrite Enabled—Displays content rewrite as enabled or disabled.
Resource Mask—Displays the resource mask.
Security Context
Transparent Single
—
•
Multiple
Context System
— —
Cisco ASA 5500 Series Configuration Guide using ASDM
Content Rewrite
67-17