Firewall
Configuring the Content Filtering to Control Access to Internet
Cisco ISA500 Series Integrated Security Appliance Administrator Guide
204
6
Mapping the Content Filtering Policy Profiles to Zones
Use the Policy Profile & Zone Mapping page to map the content filtering policy
profile to each zone.
STEP 1
Click
Firewall
-> Content Filtering ->
Policy Profile & Zone Mapping
.
The Policy Profile & Zone Mapping window opens.
STEP 2
Click
On
to enable the content filtering feature, or click
Off
to disable it.
STEP 3
In the
Policy Profile & Zone Mapping List
area, choose the policy profile used for
each zone. By default, the Default_Profile that permits all web access is selected
for all predefined and new zones.
STEP 4
Click
Save
to apply your settings. .
Configuring Advanced Settings
STEP 1
Click
Firewall
-> Content Filtering ->
Advanced Settings
.
The Advanced Settings window opens.
STEP 2
Enter the following information:
•
Specify HTTP port for the filtering (default: 80):
Enter the port number that
is used for content filtering. The default is 80.
For example, if you permit the HTTP access to the website http://
www.ABcompanyC.com and set the HTTP port to 80. The access to http://
www.ABcompanyC.com:8080 will be blocked.
•
Web Components:
You can block web components like Proxy, Java,
ActiveX, and Cookies. By default, all of them are permitted.
-
Proxy:
Check the box to block proxy servers, which can be used to
circumvent certain firewall rules and thus present a potential security
gap.
-
Java:
Check the box to block applets from being downloaded from
internet sites.
-
ActiveX:
Check the box to prevent ActiveX controls from being
downloaded via Internet Explorer.
