Cisco ASA Series Cli Configuration Manual page 1730

Configuring User Attributes
In username webvpn configuration mode, you can customize the following parameters, each of which is
described in the subsequent steps:
•
•
•
•
•
•
•
•
•
•
•
•
•
The following example shows how to enter username webvpn configuration mode for the username
anyuser attributes:
hostname(config)# username anyuser attributes
hostname(config-username)# webvpn
hostname(config-username-webvpn)#
Specifying the Content/Objects to Filter from the HTML
To filter Java, ActiveX, images, scripts, and cookies for clientless SSL VPN sessions for this user, enter
the html-content-filter command in username webvpn configuration mode. To remove a content filter,
enter the no form of this command. To remove all content filters, including a null value created by
issuing the html-content-filter none command, enter the no form of this command without arguments.
The no option allows inheritance of a value from the group policy. To prevent inheriting an HTML
content filter, enter the html-content-filter none command. HTML filtering is disabled by default.
Using the command a second time overrides the previous setting.
hostname(config-username-webvpn)# html-content-filter {java | images | scripts | cookies |
none}
hostname(config-username-webvpn)# no html-content-filter [java | images | scripts |
cookies | none]
The keywords used in this command are as follows:
•
•
•
•
•
Cisco ASA Series CLI Configuration Guide
1-96
customizations
deny message
html-content-filter
homepage
filter
url-list
port-forward
port-forward-name
sso server (single-signon server)
auto-signon
AnyConnect Secure Mobility Client
keep-alive ignore
HTTP compression
cookies—Removes cookies from images, providing limited ad filtering and privacy.
images—Removes references to images (removes <IMG> tags).
java—Removes references to Java and ActiveX (removes <EMBED>, <APPLET>, and <OBJECT>
tags.
none—Indicates that there is no filtering. Sets a null value, thereby disallowing filtering. Prevents
inheriting filtering values.
scripts—Removes references to scripting (removes <SCRIPT> tags).
Chapter 1 Configuring Connection Profiles, Group Policies, and Users