Filtering URLs and FTP Requests with an External Server
Check the Allow outbound traffic if URL server is not available check box to connect without
•
URL filtering being performed. When this check box is unchecked, you cannot connect to Internet
websites if the URL server is unavailable.
Click OK to close this dialog box.
•
Click Apply to save your changes.
•
Step 7
If you chose Add Filter FTP Rule, specify the following settings:
•
Click one of the following radio buttons: Filter FTP or Do not filter FTP.
•
Enter the source of the traffic to which the filtering action applies. To enter the source, choose from
the following options:
•
Enter the destination of the traffic to which the filtering action applies. To enter the source, choose
from the following options:
Identify the service of the traffic to which the filtering action applies. To identify the service, enter
•
one of the following:
Check the Allow outbound traffic if URL server is not available check box to connect without
•
URL filtering being performed. When this check box is unchecked, you cannot connect to Internet
websites if the URL server is unavailable.
Check the Block interactive FTP sessions (block if absolute FTP path is not provided) check box
•
to drop FTP requests if they use a relative path name to the FTP directory.
Cisco ASA 5500 Series Configuration Guide using ASDM
34-10
Enter a well-known service name, such as HTTP or FTP.
–
Click the ellipses to display the Browse Service dialog box. Choose a service from the
–
drop-down list.
–
Enter any to indicate any source address.
–
Enter a hostname.
–
Enter an IP address and optional network mask. You can express the netmask in CIDR or dotted
decimal notation. For example, you can enter 10.1.1.0/24 or 10.1.1.0/255.255.255.0.
–
Click the ellipses to display the Browse Source dialog box. Choose a host or address from the
drop-down list.
Enter any to indicate any destination address.
–
–
Enter a hostname.
–
Enter an IP address and optional network mask. You can express the netmask in CIDR or dotted
decimal notation. For example, you can enter 10.1.1.0/24 or 10.1.1.0/255.255.255.0.
Click the ellipses to display the Browse Destination dialog box. Choose a host or address from
–
the drop-down list.
tcp/port—The port number can range from 1 to 65535. Additionally, you can use the following
–
modifiers with the TCP service:
!=—Not equal to. For example, !=tcp/443
<—Less than. For example, <tcp/2000.
>—Greater than. For example, >tcp/2000.
- —Range. For example, tcp/2000-3000.
Enter a well-known service name, such as http or ftp.
–
–
Click the ellipses to display the Browse Service dialog box. Choose a service from the
drop-down list.
Chapter 34
Configuring Filtering Services
OL-20339-01