Object Http-Filter - Avaya Secure Router 3120 Command Reference Manual

object http-filter

Creates an HTTP (Hyper Text Transfer Protocol) application filter object. Use the no form of
the command to delete the existing http-filer object or remove the file extensions from an
existing http-filter object.
This application filter object can be applied to any number of policies if created in firewall global
mode. If created in a specific map, then this application filter can be applied to any number of
policies, but only for this specific map.
syntax:
[no] http-filter object-name [ deny ] [ log ]
object name
deny
log
example:
To create a global HTTP application filter named myhttp that permits all the URLs except Java
and Activex, enter:
SR/configure> firewall global SR/configure/firewall global> object SR/configure/firewall global/
object>
To create a global HTTP application filter named httpdeny that permits all URLs but filters out
Java applications and .gif and .jpg files, enter:
SR/configure/firewall global/object>
To remove HTTP file extensions .gif from a global HTTP application filter named httpdeny,
enter:
SR/configure/firewall global/object>
To delete a global HTTP application filter named httpdeny, enter:
SR/configure/firewall global/object>
To create a map-specific HTTP application filter named corphttp that allows all URLs but filters
out Java applications and files with .exe extensions, enter:
SR/configure/firewall corp/object>
Avaya Secure Router 3120 Command Reference Guide
parameter
http-filter myhttp deny java activex
definition
The name of the HTTP filter.
Lists web extensions that cannot be executed (for
example, java, activex, jar, mar, and *.url). The list is
limited to 10 extensions (excluding java, activex, and
jar) entered as strings separated by space.
Enables or disables logging.
http-filter httpdeny deny java *.gif *.jpg
no http-filter httpdeny deny *.gif
no http-filter httpdeny
http-filter corphttp deny java *.exe
object http-filter
December 2010 959