Juniper NETWORK AND SECURITY MANAGER 2010.3, Руководство администратора

Страница: 415 / 1016

8.
Set filters. You can select from existing lists or create new lists for each filter by
clicking
+
beside the field.
• Permitted command list
• Block command list
• Block extension list
•
Block mime list
•
Block mime list except
9.
Select OK.
Creating a URL Filtering Profile
Based on your requirements, you can use URL filtering to prevent malicious or suspicious
URLs from transferring their data. For example, you might wish to filter out gaming or
entertainment sites.
1.
Select
Object Manager
>
UTM
>
URL Filtering
. NSM displays two tables: Predefined
UTM UF Profiles on top and Custom UTM UF Profiles below. You can only view but
not edit the listed predefined profiles. You can create and edit custom profiles.
2.
Select + in the Custom UTM UF Profiles table. The New URL Filtering Profile window
opens.
3.
Enter a name for the profile.
4.
Enter a comment or description.
5.
Select a color from the drop-down list.
6.
Select the engine type. If you select Surf-control Integrated, set the following:
• Default action: Block or permit.
•
Timeout period: In the range of 1-1800. Mouse over the field to see a tool tip with
the allowed values.
•
Enter a deny message.
• Set Fallback actions- either deny or permit- for the following: Default, Server Conn,
Time out, Too many requests.
• Select the list of categories to filter. You can edit the existing list or add a new one
by clicking
+
. You can permit or deny each of the categories.
If you select Websense Redirect as the engine, set the following properties:
• Enter server information: Host name, Port in the range 1024- 65535, Sockets in
the range 1-8. Mouse over the field to see a tool tip with the allowed values.
•
Enter account name.
•
Select Timeout period: In the range of 1-1800.
365 Copyright © 2010, Juniper Networks, Inc.
Chapter 8: Configuring Objects