R3166-R3206-HP High-End Firewalls Attack Protection Configuration Guide-6PW101

54
Configuring IP address-supported URL address filtering
Follow these steps to configure IP address-supported URL address filtering:
To do... Use the command...
Remarks
Enter system view system-view —
Enable the URL address
filtering function
firewall http url-filter host enable
Required
Disabled by default
Configure IP
address-supported URL
address filtering
firewall http url-filter host ip-address
{ deny | permit }
Optional
Deny by default
Specify an ACL for URL
address filtering
firewall http url-filter host acl
acl-number
Optional
By default, no ACL is specified for
URL address filtering.
Display information about URL
address filtering
display firewall http url-filter host [ all
| item keywords | verbose ]
Optional
NOTE:
The source IP addresses specified in the ACL for URL address filtering must be the IP addresses of the
w
ebsites to be accessed.
Configuring URL parameter filtering
Follow these steps to configure URL parameter filtering:
To do... Use the command...
Remarks
Enter system view system-view —
Enable the URL parameter filtering
function
firewall http url-filter parameter
enable
Required
Disabled by default
Add a URL parameter filtering
entry
firewall http url-filter parameter
{ default | keywords keywords }
Required
Save URL parameter filtering
entries into a specified file
firewall http url-filter parameter
save file-name
Optional
Specify to load a URL parameter
filtering file at restart
firewall http url-filter parameter
load file-name
Optional
Display information about URL
parameter filtering
display firewall http url-filter
parameter [ all | item keywords |
verbose ]
Optional
Configuring Java blocking
Follow these steps to configure Java blocking:
To do... Use the command...
Remarks
Enter system view system-view —