Solution - D-Link DFL-1600 User Manual

156 Chapter 18. Application Layer Gateway (ALG)
ActiveX objects
An ActiveX object is a HTTP component, which is downloaded and
executed on the client computer. Because it is executed on the client,
certain security issues exists, which could cause harm to the local computer
system.
JavaScript/VBScript
In order to display more advanced and dynamic HTML pages, scripts can
be used. A script is executed by the web browser, and can be used to
control the browser functionality, validate user's input, or a number of
other features. It could potentially be used by an attacker in an attempt to
cause harm to a computer system, or to cause various annoyances, such as
pop-up windows.
Java Applets
A java applet is written in JAVA programming language, and a java-enabled
browser can download and execute this code on the client computer. An
applet can contain malicious code, which lead to security problems.
Cookies
A cookie is a small text file, stored locally on the client computer. Its
objective is to make a web server remember certain information about a
user, which has been entered previously. This can also contain confidential
information.
18.3.2

Solution

D-Link firewalls address the security issues shown in the previous section by
Stripping Contents and URL Filtering.
Stripping Contents
In D-Link HTTP ALG configuration, some or all of the active contents
mentioned previously can be stripped away from HTTP traffic upon
administrator's requests.
D-Link Firewalls User's Guide