R3166-R3206-HP High-End Firewalls Attack Protection Configuration Guide-6PW101

41
Filtering rule loading
You can specify a filtering file to be automatically loaded by the device at restart. This configuration takes
effect after the device restarts and is available only to URL address filtering and URL parameter filtering.
NOTE:
• Do not modify the contents of the filtering rule file. Otherwise, automatic loading of filterin
g
rules may
fail. If filtering rules are modified, you can back up the filtering rules to a new file, thus to implement the
modification of the filtering rules.
• Because the file system does not support hot swapping, the filtering rule file on the active main
processin
g
unit (MPU) cannot be synchronized to the standby MPU when the standby MPU is inserted.
Configuring web filtering in the web interface
URL address filtering configuration task list
Perform the tasks in Table 19 to configure URL address filtering:
Table 19 URL address filtering configuration task list
Task Remarks
Configuring URL address filtering
Required
Enable URL address filtering and configure the default filtering action, IP
address-supported URL address filtering, and logging.
Disabled by default.
Configuring URL address filtering
keywords
Required
Specify a URL address filtering keyword and the corresponding filtering
action.
By default, no filtering keyword exists.
The device supports a maximum of 256 URL address filtering keywords.
Backing up and loading a URL
address filtering rule file
Optional
Displaying URL address filtering
information
Optional
Displays the number of times that each URL address filtering keyword
has been matched and allows you to reset the statistics.
URL parameter filtering configuration task list
Perform the tasks in Table 20 to configure URL parameter filtering:
Table 20 URL parameter filtering configuration task list
Task Remarks
Configuring URL parameter filtering
Required
Enable URL parameter filtering, and configure whether to enable system
defined filtering parameters and logging.
Disabled by default.