18-6
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 18 Managing Firewall Web Filter Rules
Configuring Web Filter Rules for ASA, PIX, and FWSM Devices
•Configuring Settings for Web Filter Servers, page18-15
Field Reference
Table18-2 Add and Edit PIX/ASA/FWSM Web Filter Rule Dialog Boxes
Element Description
Enable Rule Whether to enable the rule, which means the rule becomes active when
you deploy the configuration to the device. Disabled rules are shown
overlain with hash marks in the rule table. For more information, see
Enabling and Disabling Rules, page 12-20.
Filtering The type of rule you are defining:
•Filter—The rule filters the identified type of traffic between source
and destination.
•Filter Except—The rule creates an exemption to a filter rule. The
identified traffic between the source and destination is not filtered.
Type The type of traffic that should be filtered (or exempted from filtering)
for this rule. For filtering that uses an external server, consult the
documentation for your version of the server to determine if it supports
that type of filtering. Configure the filtering server on the Web Filter
Settings Page, page 18-16.
•URL—HTTP traffic. Filtering is done using an external filtering
server.
•HTTPS—HTTPS traffic. This does not include traffic associated
with an SSL VPN. Filtering is done using an external filtering
server.
•Java—Remove Java applets from HTTP traffic if they are identified
on applet tags. The rule does not remove Java applets from SSL
VPN traffic. If the applet tag spans packets, or the code in the tags
is larger than the MTU, the Java applet is not removed.
•ActiveX—Remove A ctiveX or Java applet s from HTTP tra ffic. The
rule removes any item within object or applet tags, which might
also remove images and multimedia objects. The rule might not
remove applets from SSL VPN traffic. If the object tag spans
packets, or the code in the tags is larger than the MTU, the object
is not removed.
•FTP—FTP traffic. Filtering is done using an external filtering
server.