R3166-R3206-HP High-End Firewalls Attack Protection Configuration Guide-6PW101

55
To do... Use the command... Remarks
Enable the Java blocking
function
firewall http java-blocking enable
Required
Disabled by default
Add a Java blocking suffix
keyword
firewall http java-blocking suffix
keywords
Optional
Specify an ACL for Java
blocking
firewall http java-blocking acl
acl-number
Optional
By default, no ACL is specified for
Java blocking.
Display information about
Java blocking
display firewall http java-blocking [ all |
item keywords | verbose ]
Optional
NOTE:
In the ACL for Java blocking, you need to configure the source IP addresses as the IP addresses of the HTTP
servers allowed to be accessed, and set the action to permit.
Configuring ActiveX blocking
Follow these steps to configure ActiveX blocking:
To do... Use the command...
Remarks
Enter system view system-view —
Enable the ActiveX
blocking function
firewall http activex-blocking enable
Required
Disabled by default
Add an ActiveX blocking
suffix keyword
firewall http activex-blocking suffix
keywords
Optional
Specify an ACL for ActiveX
blocking
firewall http activex-blocking acl
acl-number
Optional
By default, no ACL is specified for
ActiveX blocking.
Display information about
ActiveX blocking
display firewall http activex-blocking [ all
| item keywords | verbose ]
Optional
NOTE:
In the ACL for ActiveX blocking, you need to configure the source IP addresses as the IP addresses of the
HTTP servers allowed to be accessed and set the action to permit.
Displaying and maintaining web filtering
To do... Use the command... Remarks
Display information about
URL address filtering
display firewall http url-filter host [ all | item
keywords | verbose ]
Available in any view
Display information about
URL parameter filtering
display firewall http url-filter parameter [ all |
item keywords | verbose ]
Available in any view
Display information about
Java blocking
display firewall http java-blocking [ all | item
keywords | verbose ]
Available in any view