HP VPN Firewall Appliances Attack Protection Configuration Guide

78
Ste
p
Descri
p
tion
Configuring keyword
filtering entries
Keyword filtering entries include:
• HTTP keyword filtering entries—For header filtering and body filtering in
HTTP filtering policies.
• SMTP keyword filtering entries—For subject filtering, body filtering, and
attachment content filtering in SMTP filtering policies.
• POP3 keyword filtering entries—For subject filtering, body filtering, and
attachment content filtering in POP3 filtering policies.
• FTP keyword filtering entries—For command word filtering in FTP filtering
polices.
• Telnet keyword filtering entries—For command word filtering in Telnet
filtering policies.
By default, no keyword filtering entries exist.
Configuring URL hostname
filtering entries
Used for URL hostname filtering in HTTP filtering policies.
By default, no URL hostname filtering entries exist.
Configuring filename
filtering entries
Filename filtering entries include:
• SMTP filename filtering entries—For attachment name filtering in SMTP
filtering policies.
• POP3 filename filtering entries—For attachment name filtering in POP3
filtering policies.
• FTP filename filtering entries—For upload filename filtering and download
filename filtering in FTP filtering policies.
By default, no filename filtering entries exist.
Configuring an email
address filtering entry
Email address filtering entries include:
• SMTP email address filtering entries—For sender filtering and receiver
filtering in SMTP filtering policies.
• POP3 email address filtering entries—For sender filtering and receiver
filtering in POP3 filtering policies.
By default, no mail address filtering entries exist.
Configuring URL parameter
filtering keywords
Add keywords to be used for URL parameter filtering in HTTP filtering policies.
The system provides the following predefined URL parameter filtering keywords:
^select$, ^insert$, ^update$, ^delete$, ^drop$, --, ‘, ^exec$, and %27.
By default, the predefined URL parameter filtering keywords are not used. In this
case, you can define the same URL parameter filtering keywords as the system
predefined ones, and, these keywords are still used as user-defined keywords
even after you enable the predefined keywords.
Configuring java blocking
keywords
Used for java applet blocking in HTTP filtering policies.
By default, the following java suffix keywords exist: .class and .jar.
Configuring ActiveX
blocking keywords
Used for ActiveX blocking in HTTP filtering policies.
By default, the system has the ActiveX suffix keyword: .ocx.
Configuring keyword filtering entries
1. From the navigation tree, select Identification > Content Filtering > Filtering Entry.
The keyword filtering entry list page appears.