F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Attack Protection Configuration Guide-6PW100

79
Ste
p
Descri
p
tion
346H
Configuring a keyword
filtering entry
Keyword filtering entries include:
• HTTP keyword filtering entries—For header filtering and body filtering in
HTTP filtering policies.
• SMTP keyword filtering entries—For subject filtering, body filtering, and
attachment content filtering in SMTP filtering policies.
• POP3 keyword filtering entries—For subject filtering, body filtering, and
attachment content filtering in POP3 filtering policies.
• FTP keyword filtering entries—For command word filtering in FTP filtering
polices.
• Telnet keyword filtering entries—For command word filtering in Telnet
filtering policies.
By default, no keyword filtering entries exist.
347H
Configuring a URL
hostname filtering
Used for URL hostname filtering in HTTP filtering policies.
By default, no URL hostname filtering entries exist.
348H
Configuring a filename
filtering
Filename filtering entries include:
• SMTP filename filtering entries—For attachment name filtering in SMTP
filtering policies.
• POP3 filename filtering entries—For attachment name filtering in POP3
filtering policies.
• FTP filename filtering entries—For upload filename filtering and download
filename filtering in FTP filtering policies.
By default, no filename filtering entries exist.
349H
Configuring an email
address filtering entry
Email address filtering entries include:
• SMTP email address filtering entries—For sender filtering and receiver
filtering in SMTP filtering policies.
• POP3 email address filtering entries—For sender filtering and receiver
filtering in POP3 filtering policies.
By default, no mail address filtering entries exist.
350H
Configuring URL parameter
filtering keywords
Add keywords to be used for URL parameter filtering in HTTP filtering policies.
The system provides the following predefined URL parameter filtering keywords:
^select$, ^insert$, ^update$, ^delete$, ^drop$, --, ‘, ^exec$, and %27.
By default, the predefined URL parameter filtering keywords are not used. In this
case, you can define the same URL parameter filtering keywords as the system
predefined ones, and, these keywords are still used as user-defined keywords
even after you enable the predefined keywords.
351H
Configuring java blocking
keywords
Used for java applet blocking in HTTP filtering policies.
By default, the following java suffix keywords exist: .class and .jar.
352H
Configuring ActiveX
blocking keywords
Used for ActiveX blocking in HTTP filtering policies.
By default, the system has the ActiveX suffix keyword: .ocx.
189BConfiguring keyword filtering entries
1. From the navigation tree, select Identification > Content Filtering > Filtering Entry.
The keyword filtering entry list page appears.