i just finish setup the IOS content filtering on C1841. basically it's combo of local filtering and Trend micro subscrition based. all the parameter-map, class-map, policy-map and zone firewall setting is up and ready to go.
Some question to ask
1. how do i examine trend micro content filtering on it REPUTATION and CATEGORIES is really working? as usual, after setup these command :
paramater-map type trend-global MY-GLOBAL-PARAM server trps.trendmicro.com
pamater-map type urlfpolicy trend MY-PARAM allow-mode on block-pass message "bla-bla-bla"
class-map type urlfilter trend match-any trend-block-categories match url catergory Adult-Mature-Content
class-map type urlfilter trend match-any trend-block-reputation match url reputation ADWARE
policy-map type inspect urlfilter MY-ACTION parameter type urlfpolicy trend MY-PARAM class type urlfilter trend trend-block-categories reset class type urlfilter trendtrend-block-reputation reset
so for my zone firewall policy:
policy-map type inspect out->in class type inspect trafic inspect service-policy urlfilter MY-ACTION
then i do apply zone-pair to the outside and inside interface,everything set to go.
so far what i can block is only using URL-blacklist to block the whole domain. anyway how can totally left to trend micro subscription license to do with it all?
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...