R3303-HP HSR6800 Routers Security Configuration Guide

375
Ste
p
Command Remarks
2. Enable the URL address filtering
function.
firewall http url-filter host enable Disabled by default.
3. Configure IP address-supported
URL address filtering.
firewall http url-filter host
ip-address { deny | permit }
Deny by default.
4. Specify an ACL for URL address
filtering.
firewall http url-filter host acl
acl-number
Optional.
By default, no ACL is specified for
URL address filtering.
5. Display information about URL
address filtering.
display firewall http url-filter host
[ all | item keywords | verbose ] [ |
{ begin | exclude | include }
regular-expression ]
Optional.
The source IP addresses specified in the ACL for URL address filtering must be the IP addresses of the
websites allowed to be accessed by using their IP addresses.
Configuring URL parameter filtering
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enable the URL parameter
filtering function.
firewall http url-filter parameter enable Disabled by default.
3. Add a URL parameter
filtering entry.
firewall http url-filter parameter { default |
keywords keywords }
N/A
4. Display information about
URL parameter filtering.
display firewall http url-filter parameter
[ all | item keywords | verbose ] [ |
{ begin | exclude | include }
regular-expression ]
Optional.
Configuring Java blocking
Ste
p
Command Remarks
1. Enter system view.
system-view
N/A
2. Enable the Java blocking
function.
firewall http java-blocking enable Disabled by default.
3. Add a Java blocking suffix
keyword.
firewall http java-blocking suffix
keywords
Optional.
4. Specify an ACL for Java
blocking.
firewall http java-blocking acl
acl-number
Optional.
By default, no ACL is specified for
Java blocking.