ZyXEL Communications ZyWALL USG Series, Reference Manual

Page: 240 / 426

Chapter 35 Content Filtering
ZyWALL / USG (ZLD) CLI Reference Guide
240
configuration mode to be able to use these commands. See Table 136 on page 238 for details about
the values you can input with these commands.
Table 137
content-filter General Commands
COMMAND DESCRIPTION
[no] content-filter block message message
Sets the message to display when content filtering blocks
access to a web page. The
no
command clears the setting.
[no] content-filter block redirect redirect_url
Sets the URL of the web page to which to send users when their
web access is blocked by content filtering. The
no
command
clears the setting.
content-filter passed warning flush
Clears the ZyWALL / USG’s record of sessions for which it has
given the user a warning before allowing access.
content-filter passed warning timeout <1..1440>
Sets how long to keep records of sessions for which the ZyWALL
/ USG has given the user a warning before allowing access.
content-filter url-server test commtouch
Enters the sub-command mode for testing the Commtouch
external content filter server’s reachability.
url timeout query_timeout
Specify the Commtouch server’s URL and how long to wait for a
response.
exit
Leaves the sub-command mode.
content-filter common-list {trust|forbid}
Enters the sub-command for configuring a common list of
trusted or forbidden web sites.
The content filtering profile commands let you configure trusted
or forbidden URLs for individual profiles. URL checking is applied
in the following order: profile trusted web sites, common
trusted web sites, profile forbidden web sites, common
forbidden web sites, and then profile keywords.
[no] { ipv4 | ipv4_cidr | ipv4_range |
wildcard_domainname | tld |ipv6 | ipv6_range
| ipv6_prefix }
Adds or removes a common trusted or forbidden web site entry.
ipv4
: IPv4 address <W.X.Y.Z>
ipv4_cidr
: IPv4 subnet in CIDR format, i.e. 192.168.1.0/32
<W.X.Y.Z>/<1..32>
ipv4_range
: Range of IPv4 addresses. <W.X.Y.Z>-<W.X.Y.Z>
wildcard_domainname
: wildcard domain name, i.e. zyxel*.co*
(([*a-z0-9\-]){1,63}\.)+([*a-z0-9\-]){1,63}
tld
: top level domain.
ipv6: IPv6 address, i.e. 2001::1
ipv6_range: Range of IPv6 address, < IPv6 Address >-< IPv6
Address >
ipv6_prefix: IPv6 prefix formant, <IPv6 Address>/<Prefix
Length>
exit
Leaves the sub-command mode.
content-filter cf-queue flush
clear cf queuing packet
show content-filter passed warning
Displays the ZyWALL / USG’s record of sessions for which it has
given the user a warning before allowing access.
show content-filter settings
Displays the general content filtering settings.
show content-filter common-list {trust|forbid}
Displays the common list of trusted or forbidden web sites.