Viewing Filtering Statistics And Configuration - Cisco FirePOWER ASA 5500 series Configuration Manual

Chapter 20 Applying Filtering Services
To enable FTP filtering, enter the following command:
hostname(config)# filter ftp port[-port] localIP local_mask foreign_IP foreign_mask
[allow] [interact-block]
Replace port[-port] with a range of port numbers if a different port than the default port for FTP (21) is
used.
Replace local_ip and local_mask with the IP address and subnet mask of a user or subnetwork making
requests.
Replace foreign_ip and foreign_mask with the IP address and subnet mask of a server or subnetwork
responding to requests.
The allow option causes the security appliance to forward HTTPS traffic without filtering when the
primary filtering server is unavailable.
Use the interact-block option to prevent interactive FTP sessions that do not provide the entire directory
path. An interactive FTP client allows the user to change directories without typing the entire path. For
example, the user might enter cd ./files instead of cd /public/files.

Viewing Filtering Statistics and Configuration

This section describes how to monitor filtering statistics. This section includes the following topics:
•
•
•
•
•
Viewing Filtering Server Statistics
To show information about the filtering server, enter the following command:
hostname# show running-config url-server
The following is sample output from the show running-config url-server command:
hostname# show running-config url-server
url-server (outside) vendor n2h2 host 128.107.254.202 port 4005 timeout 5 protocol TCP
To show information about the filtering server or to show statistics, enter the following command:
The following is sample output from the show running-config url-server statistics command, which
shows filtering statistics:
hostname# show running-config url-server statistics
Global Statistics:
--------------------
URLs total/allowed/denied
URLs allowed by cache/server
URLs denied by cache/server
HTTPSs total/allowed/denied
HTTPSs allowed by cache/server
HTTPSs denied by cache/server
OL-10088-01
Viewing Filtering Server Statistics, page 20-9
Viewing Buffer Configuration and Statistics, page 20-10
Viewing Caching Statistics, page 20-11
Viewing Filtering Performance Statistics, page 20-11
Viewing Filtering Configuration, page 20-11
Viewing Filtering Statistics and Configuration
13/3/10
0/3
0/10
138/137/1
0/137
0/1
Cisco Security Appliance Command Line Configuration Guide
20-9