Chapter 12
HTTP and FTP filtering
162
Figure 12.5
HTTP protocol inspector settings
12.3 Global rules for Web elements
In
WinRoute
you can also block certain features contained in HTML pages. Typical undesirable
items are ActiveX objects (they might enable starting of applications on client hosts) and pop-
up windows (automatically opened browser windows, usually used for advert purposes).
To define content global filtering rules go to the
Content Rules
tab in the
Configuration
→
Content Filtering
→
HTTP Policy
section. Special settings for individual pages can be defined
in URL Rules section (refer to chapter
).
Settings on the
WWW content scanning options
tab are applied to traffic of hosts where users
are not authenticated. Special settings are used for users connected through the firewall.
Each authenticated user can customize filtering rules at the user preferences page (see chap-
ter
). However, users that are not allowed to
override WWW content rules
(refer to chap-
ter
) cannot permit HTML features that are denied globally.
Allow HTML ActiveX objects
Active objects at web pages.
This option allows/blocks
<object>
and
<embed>
HTML tags.
Allow <Script> HTML tags
HTML
<script>
tags — commands of scripting languages, such as
JavaScript
,
VBScript
,
etc.
Allow HTML JavaScript pop-up windows
Automatic opening of new browser windows — usually pop-up windows with advertise-
ments.
This option enables/blocks the
window.open()
method in scripts
Summary of Contents for Firewall6
Page 1: ...Kerio WinRoute Firewall 6 Administrator s Guide Kerio Technologies...
Page 129: ...8 5 HTTP cache 129...
Page 404: ...404...
