HP VPN Firewall Appliances Attack Protection Configuration Guide

77
{ The ampersand (&) matches any single character. It can be used for multiple times in a keyword,
consecutively or non-consecutively. It can appear at any position of a keyword, but cannot be
used next to asterisk (*).
{ The asterisk (*) matches any string of up to 4 characters, including spaces. It can be used only
once in a keyword and must not be at the beginning or end.
{ A keyword with caret (^) at the beginning or dollar sign ($) at the end indicates an exact match.
For example, keyword ^webfilter$ matches URLs containing standalone word webfilter, like
www.abc.com/webfilter any; it does not match URLs like www.abc.com/webfilterany.
{ A keyword with no wildcard used at the beginning and end indicates a fuzzy match, and
matches URLs containing the keyword.
Configuring content filtering in the Web interface
Recommended configuration procedure
Ste
p
Descri
p
tion
1. Configuring a keyword filtering policy
Required.
2. Configuring a content filtering policy
Required.
3. Configuring a content filtering policy template
Required.
4. Configuring an interzone policy
Required.
Configure an interzone policy to be used between the
source and destination security zones, and apply the
content filtering policy template to the interzone policy.
In this way, the device can filter packets that match the
interzone policy.
You must set the action to Permit in the interzone policy
to make the referenced content filtering policy template
take effect.
For more information, see Access Control Configuration
Guide.
5. Displaying content filtering statistics
Optional.
View the statistics of various content filtering functions.
Configuring a keyword filtering policy
You can configure filtering entries and filtering keywords as needed.
To configure filtering entries and filtering keywords: