Cisco Systems 2.5 URL Filtering Precedence

38-9
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
Chapter38 URL Filtering
URL Filtering Window
Retransmission Timeout
Optional field. Enter the number of seconds that the route r should wait for a
response from the server before retransmitting the request. The default value is 5
seconds.
URL Filtering Precedence
URL filtering must be enabled by going to Configure > Firewall and ACL >
Application Security > URL Filtering and clicking Enable URL filtering. This
can only be done when an Application security policy is configured on the router.
When URL filtering is enabled, the router determines how to handle an HTTP
request as follows:
•If the URL in the request matches an entry in the local URL list on the router,
the router permits or denies the request based on that entry.
•If the URL in the request does not match any entry in the local URL list, the
router passes the HTTP request to the URL filtering server to which it has a
connection. It permits or denies the request based on the information that the
server returns.
•If allow mode is disabled, and the router cannot establish a connection with a
URL filter server, the router denies the request. Allow mode is disabled by
default.
•If allow mode is enabled and the router cannot establish a connection wi th a
URL filter server, the router permits the request. Allow mode can be enabled
in the Edit Global Settings dialog.
Only one URL list and one URL filter server list can be configured on the router.
All configured Application Security policies use the same URL list and URL filter
server list. These lists can be maintained in the Application Security windows, or
by going to Additional Task s > URL Filtering. If all Application Security
policies are deleted, the URL list and URL filter server list can still be maintained
in the Additional Tasks windows. However, the router does not perform URL
filtering unless URL filtering is enabled in an Application Security policy.