Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Руководство администратора

Страница: 306 / 861

305 Controlling traffic at the security gateway
Blocking inappropriate content with content filtering
To add file extension filtering to a rule
1 In the SGMI, in the left pane, under Policy, click Firewall .
2 In the right pane, on the Rules tab, do one of the following:
■
To add file extension filtering to an existing rule, highlight the rule, and then double-click to
display its properties.
■
To create a new rule, click New .
3 If you create a new rule, in the Rule Properties dialog box, on the General tab, do the following:
4 Next to the Service group field, do one of the following:
■
Select a service group that contains the HTTP protocol, such as the Web service group.
■
Select a service group and add the HTTP protocol to it.
■
Create a service group with the HTTP protocol.
5 On the Content Filtering tab, ensure that the HTTP check box is checked.
6
Under Select the protocols and settings to apply content filtering scanning, check Apply file
extension restrictions .
7 Optionally, do one of the following:
■
To save your configuration now and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .
Related information
For further information related to this topic, see the following:
■
“Content Filtering—Advanced Restrictions tab” on page 646
■
“Content Filtering Advanced Restrictions tab—File Extension dialog box” on page 648
■
“Adding content filtering protection to a rule” on page 316
Rule name Type a name for this rule.
Caption Type a brief description of the rule.
Action Click allow .
Arriving through Select the connection point through which traffic enters the security gateway.
Source Select the defined network entity from which HTTP traffic originates. This can be a host
network entity representing a specific machine from which the packets originate, or
subnet network entity representing your internal network.
Destination Select the defined network entity to which HTTP traffic is destined. This can be a host
network entity representing a specific machine or a subnet network entity representing
your internal network.
Leaving through Select the connection point through which traffic leaves the security gateway.