Url Address Filtering Configuration Example - HP 6600 Security Configuration Manual

Task
Clear web filtering statistics.

URL address filtering configuration example

Network requirements
The hosts in the network segment 192.168.1.0/24 access the Internet through the device. The device is
enabled with the URL address filtering function, and allows the hosts to access only www.webflt.com
using the URL address or IP address.
Figure 233 Network diagram
Configuration procedure
# Configure IP addresses for the interfaces. (Details not shown.)
# Configure the NAT policy for the outbound interface.
<Router> system-view
[Router] acl number 2200
[Router-acl-basic-2200] rule 0 permit source 192.168.1.0 0.0.0.255
[Router-acl-basic-2200] rule 1 deny source any
[Router-acl-basic-2200] quit
[Router] nat address-group 1 2.2.2.10 2.2.2.11
[Router] interface gigabitethernet 3/0/1
[Router-GigabitEthernet3/0/1] nat outbound 2200 address-group 1
[Router-GigabitEthernet3/0/1] quit
# Enable the URL address filtering function.
[Router] firewall http url-filter host enable
# Specify to allow users to access only www.webfit.com and set the default filtering action to deny.
[Router] firewall http url-filter host url-address permit www.webflt.com
[Router] firewall http url-filter host default deny
# Specify an ACL for URL address filtering.
[Router] acl number 2000
[Router-acl-basic-2000] rule 0 permit source 3.3.3.3 0.0.0.0
[Router-acl-basic-2000] rule 1 deny source any
Command
reset firewall http { activex-blocking |
java-blocking | url-filter host | url-filter
parameter } counter
471
Remarks
Available in user view.