Url Filtering - Cisco ASR 5000 series Product Overview

▀ Enhanced Services in ECS

URL Filtering

The URL Filtering feature simplifies using rule definitions for URL detection.
The following configuration is currently used for hundreds of URLs:
In the above ruledef:
The HTTP request for the URL ―http://ab-wap.yz‖ is first sent to a proxy ―http://cdab-subs.opera-mini.net/‖.
The URL ―http://cdab-subs.opera-mini.net/‖ will be configured as a prefixed URL.
Prefixed URLs are URLs of the proxies. A packet can have a URL of the proxy and the actual URL contiguously. First
a packet is searched for the presence of proxy URL. If the proxy URL is found, it is truncated from the parsed
information and only the actual URL (that immediately follows it) is used for rule matching and EDR generation.
The group-of-ruledefs can have rules for URLs that need to be actually searched (URLs that immediately follow the
proxy URLs). I.e., the group-of-prefixed-URLs will have URLs that need to be truncated from the packet information
for further ECS processing, whereas, the group-of-ruledefs will have rules that need to be actually searched for in the
packet.
URLs that you expect to be prefixed to the actual URL can be grouped together in a group-of-prefixed-URLs. A
maximum of 64 such groups can be configured. In each such group, URLs that need to be truncated from the URL
contained in the packet are specified. Each group can have a maximum of 10 such prefixed URLs. By default, all group-
of-prefixed-URLs are disabled.
In the ECS rulebase, you can enable/disable the group-of-prefixed-URLs to filter for prefixed URLs.
Important:
―http://www.xyz.com/http://www.abc.com‖. Here, ―http://www.xyz.com‖ will be stripped off. But in
―http://www.xyz.com/www.abc.com‖, it cannot detect and strip off ―http://www.xyz.com‖ as it looks for occurrence of
―http‖ or ―https‖ within the URL.
▄ Cisco ASR 5000 Series Product Overview
A timedef is not configured in an action priority
A timedef is configured in an action priority, but the named timedef is not defined
A timedef is defined but with no timeslots
A prefixed URL can be detected and stripped if it is of the type
Enhanced Charging Service Overview
OL-22938-02