Cisco Asdm 7 User Guide

 
29-5
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 29      Configuring Filtering Services
  Filtering URLs and FTP Requests with an External Server
Buffering the Content Server Response, page 29-5
Caching Server Addresses, page 29-5
Filtering HTTP URLs, page 29-6
Buffering the Content Server Response
When you issue a request to connect to a content server, the ASA sends the request to the content server 
and to the filtering server at the same time. If the filtering server does not...

 
29-6
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 29      Configuring Filtering Services
  Filtering URLs and FTP Requests with an External Server
Step 5Click OK to close this dialog box.
Filtering HTTP URLs
This section describes how to configure HTTP filtering with an external filtering server and includes the 
following topics:
Enabling Filtering of Long HTTP URLs, page 29-6
Enabling Filtering of Long HTTP URLs
By default, the ASA considers an HTTP URL to be a long URL if it is...

 
29-7
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 29      Configuring Filtering Services
  Filtering URLs and FTP Requests with an External Server
–Enter a hostname.
–Enter an IP address and optional network mask. You can express the netmask in CIDR or dotted 
decimal notation. For example, you can enter 10.1.1.0/24 or 10.1.1.0/255.255.255.0.
–Click the ellipses to display the Browse Source dialog box. Choose a host or address from the 
drop-down list.
Enter the destination of the...

 
29-8
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 29      Configuring Filtering Services
  Filtering URLs and FTP Requests with an External Server
–Enter an IP address and optional network mask. You can express the netmask in CIDR or dotted 
decimal notation. For example, you can enter 10.1.1.0/24 or 10.1.1.0/255.255.255.0.
–Click the ellipses to display the Browse Destination dialog box. Choose a host or address from 
the drop-down list.
Identify the service of the traffic to which the...

 
29-9
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 29      Configuring Filtering Services
  Filtering URLs and FTP Requests with an External Server
>—Greater than. For example, >tcp/2000.
- —Range. For example, tcp/2000-3000.
–Enter a well-known service name, such as HTTP or FTP.
–Click the ellipses to display the Browse Service dialog box. Choose a service from the 
drop-down list.
Choose the action to take when the URL exceeds the specified size from the drop-down list.
Check the Allow...

 
29-10
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 29      Configuring Filtering Services
  Filtering URLs and FTP Requests with an External Server
–Enter a well-known service name, such as HTTP or FTP.
–Click the ellipses to display the Browse Service dialog box. Choose a service from the 
drop-down list.
Check the Allow outbound traffic if URL server is not available check box to connect without 
URL filtering being performed. When this check box is unchecked, you cannot connect to...

 
29-11
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 29      Configuring Filtering Services
  Filtering URLs and FTP Requests with an External Server
Click OK to close this dialog box.
Click Apply to save your changes.
Step 8To modify a filtering rule, select it and click Edit to display the Edit Filter Rule dialog box for the 
specified filtering rule. 
Step 9Make the required changes, then click OK to close this dialog box.
Step 10Click Apply to save your changes.
Filtering the Rule...

 
29-12
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 29      Configuring Filtering Services
  Filtering URLs and FTP Requests with an External Server
Step 12To delete a selected filter rule, click Delete.
Defining Queries
To define queries, perform the following steps:
Step 1Enter the IP address or hostname of the source. Choose is for an exact match or choose contains for a 
partial match. Click the ellipses to display the Browse Source dialog box. You can specify a network 
mask using...

 
PART 8
Configuring Modules