topic Re: Block java/active-x in Network Security

Block java/active-x

niro — Mon, 11 Mar 2019 12:43:53 GMT

I'm trying to block java and active-x on the ASA, I do want to enable it for some hosts to some sites. Is that possible?

The config I have which is not working is this:

filter java 80 10.10.10.40 255.255.255.255 0.0.0.0 0.0.0.0

filter activex 80 10.10.10.40 255.255.255.255 0.0.0.0 0.0.0.0

filter java 443 10.10.10.40 255.255.255.255 0.0.0.0 0.0.0.0

Policy-map type inspect http java

parameters

match response body java-applet

mask

policy-map global_policy

class inspection_default

inspect http java

I'm sure I'm missing something since it's not working...what do I need to get this working?

niro — Tue, 13 May 2008 14:27:03 GMT

Anybody got an answer for this? I did some more research and I keep reading that these are the only lines required:

filter java 80 10.10.10.40 255.255.255.255 0.0.0.0 0.0.0.0

filter activex 80 10.10.10.40 255.255.255.255 0.0.0.0 0.0.0.0

Yet it's still not filtering any java or activex apps.

niro — Wed, 14 May 2008 12:36:18 GMT

Anybody?

niro — Fri, 16 May 2008 18:41:48 GMT

Last bump attempt