Sangfor IAM 2.1, Руководство пользователя

Страница: 129 / 319

SANGFOR IAM v2.1 User Manual
128
this item, and the access control policy will check whether the certificate (signature) of the
ActiveX control exists in the [Trusted Root Certificate List]. If certificate does not exist in the list,
the ActiveX control will be filtered. As to the management of certificates, please refer to Section
4.11 SSL Certificate.
[Denial ActiveX Control List]: Configures the keywords may contained in the ActiveX control,
one ActiveX control or issuer per row. If the keyword is detected in the plug-in, it will be filtered.
It should be noted that the keyword configured here does not support wildcard characters, length
of each keyword within 64 bytes, and total keywords within 32.
Only Allow the Following ActiveX Controls
[Only allow the following ActiveX Controls]: Check this item, and you can configure the
conditions for installing ActiveX controls. The to-be-installed ActiveX control will be marked as
secure if it matches any of that in the [Internal ActiveX Controls List]. In this way, the LAN users
can be protected from potential malicious plug-ins from external networks.
[Internal ActiveX Control List] configures three types of plug-in, namely, [Online Anti-virus
Plug-in], [Player Plug-in] and [Entertainment plug-in].