HP VPN Firewall Appliances Attack Protection Command Reference

70
Use undo command-filtering keyword-entry to remove a keyword filtering entry for command word
filtering from a content filtering policy.
Syntax
command-filtering keyword-entry keyword-entry-name
undo command-filtering keyword-entry keyword-entry-name
Default
No keyword filtering entry is specified for command word filtering.
Views
FTP filtering policy view, Telnet filtering policy view
Default command level
2: System level
Parameters
keyword-entry-name: Specifies the name of the keyword filtering entry, a case-sensitive string or 1 to 32
characters. The keyword filtering entry must already exist.
Usage guidelines
You can specify multiple keyword filtering entries for command word filtering.
Examples
# Create a keyword filtering entry HarmCmd and add keywords delete and format to the entry.
<Sysname> system-view
[Sysname] content-filtering keyword-entry HarmCmd
[Sysname-contflt-keyword-HarmCmd] keyword fix-string delete
[Sysname-contflt-keyword-HarmCmd] keyword fix-string format
[Sysname-contflt-keyword-HarmCmd] quit
# Apply the keyword filtering entry HarmCmd for command word filtering in the FTP filtering policy
FTPBanned.
[Sysname] content-filtering ftp-policy FTPBanned
[Sysname-contflt-ftp-policy-FTPBanned] command-filtering keyword-entry HarmCmd
[Sysname-contflt-ftp-policy-FTPBanned] quit
# Apply the keyword filtering entry HarmCmd for command word filtering in the Telnet filtering policy
TelnetBanned.
[Sysname] content-filtering telnet-policy TelnetBanned
[Sysname-contflt-telnet-policy-TelnetBanned] command-filtering keyword-entry HarmCmd
Related commands
• content-filtering keyword-entry
• content-filtering ftp-policy
• content-filtering telnet-policy
content-filtering activex-blocking suffix
Use content-filtering activex-blocking suffix to add an ActiveX blocking suffix keyword to the ActiveX
blocking suffix list.