Block java/active-x

niro · ‎05-12-2008

I'm trying to block java and active-x on the ASA, I do want to enable it for some hosts to some sites. Is that possible?

The config I have which is not working is this:

filter java 80 10.10.10.40 255.255.255.255 0.0.0.0 0.0.0.0

filter activex 80 10.10.10.40 255.255.255.255 0.0.0.0 0.0.0.0

filter java 443 10.10.10.40 255.255.255.255 0.0.0.0 0.0.0.0

Policy-map type inspect http java

parameters

match response body java-applet

mask

!

policy-map global_policy

class inspection_default

inspect http java

I'm sure I'm missing something since it's not working...what do I need to get this working?

niro · ‎05-13-2008

Anybody got an answer for this? I did some more research and I keep reading that these are the only lines required:

filter java 80 10.10.10.40 255.255.255.255 0.0.0.0 0.0.0.0

filter activex 80 10.10.10.40 255.255.255.255 0.0.0.0 0.0.0.0

Yet it's still not filtering any java or activex apps.

niro · ‎05-14-2008

Anybody?

niro · ‎05-16-2008

Last bump attempt