Mapping The Content Filtering Policy Profiles To Zones; Configuring Advanced Settings - Cisco ISA500 Series Administration Manual

Firewall
Configuring the Content Filtering to Control Access to Internet
STEP 1
STEP 2
STEP 3
STEP 4
STEP 1
STEP 2
Cisco ISA500 Series Integrated Security Appliance Administrator Guide

Mapping the Content Filtering Policy Profiles to Zones

Use the Policy Profile & Zone Mapping page to map the content filtering policy
profile to each zone.
Click Firewall -> Content Filtering -> Policy Profile & Zone Mapping.
The Policy Profile & Zone Mapping window opens.
Click On to enable the content filtering feature, or click Off to disable it.
In the Policy Profile & Zone Mapping List area, choose the policy profile used for
each zone. By default, the Default_Profile that permits all web access is selected
for all predefined and new zones.
Click Save to apply your settings. .

Configuring Advanced Settings

Click Firewall -> Content Filtering -> Advanced Settings.
The Advanced Settings window opens.
Enter the following information:
• Specify HTTP port for the filtering (default: 80): Enter the port number that
is used for content filtering. The default is 80.
For example, if you permit the HTTP access to the website http://
www.ABcompanyC.com and set the HTTP port to 80. The access to http://
www.ABcompanyC.com:8080 will be blocked.
• Web Components: You can block web components like Proxy, Java,
ActiveX, and Cookies. By default, all of them are permitted.
- Proxy: Check the box to block proxy servers, which can be used to
circumvent certain firewall rules and thus present a potential security
gap.
- Java: Check the box to block applets from being downloaded from
internet sites.
- ActiveX: Check the box to prevent ActiveX controls from being
downloaded via Internet Explorer.
6
204