Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Block java/active-x

I'm trying to block java and active-x on the ASA, I do want to enable it for some hosts to some sites. Is that possible?

The config I have which is not working is this:

filter java 80 10.10.10.40 255.255.255.255 0.0.0.0 0.0.0.0

filter activex 80 10.10.10.40 255.255.255.255 0.0.0.0 0.0.0.0

filter java 443 10.10.10.40 255.255.255.255 0.0.0.0 0.0.0.0

Policy-map type inspect http java

parameters

match response body java-applet

mask

!

policy-map global_policy

class inspection_default

inspect http java

I'm sure I'm missing something since it's not working...what do I need to get this working?

3 REPLIES
New Member

Re: Block java/active-x

Anybody got an answer for this? I did some more research and I keep reading that these are the only lines required:

filter java 80 10.10.10.40 255.255.255.255 0.0.0.0 0.0.0.0

filter activex 80 10.10.10.40 255.255.255.255 0.0.0.0 0.0.0.0

Yet it's still not filtering any java or activex apps.

New Member

Re: Block java/active-x

Anybody?

New Member

Re: Block java/active-x

Last bump attempt

152
Views
0
Helpful
3
Replies
CreatePlease to create content