JAVA Filter with ASA Release 7.x

Unanswered Question
Jun 29th, 2007

Hi

I am trying to configure Java filter on ASA Rel 7.2.2. I am not sure why sometimes my config filters Java applets and sometimes not. The documentation it is mentioned that http inspect is necessary with the filter commands.

The same sites are correct filtered with IOS inspects and PIX 6.3 filter commands.

the configuration:

policy-map type inspect http http1

parameters

match response body java-applet

mask

match response body active-x

mask

policy-map global_policy

class inspection_default

inspect http http1

filter java 80 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0

filter activex 80 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0

service-policy global_policy global

regards,

Herbert

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
JBDanford2002 Sat, 06/30/2007 - 06:00

Can you give an example of a site where the java applet is not being blocked?

ehuamannahui Tue, 07/24/2007 - 22:56

Hello, does anybody knows if that configuration can be set for individual no global, if that's possible what should be the configuration.

Thanks,

Actions

This Discussion