topic JAVA Filter with ASA Release 7.x in Network Security

JAVA Filter with ASA Release 7.x

herbert.aichhorn — Mon, 11 Mar 2019 10:37:25 GMT

I am trying to configure Java filter on ASA Rel 7.2.2. I am not sure why sometimes my config filters Java applets and sometimes not. The documentation it is mentioned that http inspect is necessary with the filter commands.

The same sites are correct filtered with IOS inspects and PIX 6.3 filter commands.

the configuration:

policy-map type inspect http http1

parameters

match response body java-applet

mask

match response body active-x

mask

policy-map global_policy

class inspection_default

inspect http http1

filter java 80 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0

filter activex 80 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0

service-policy global_policy global

regards,

Herbert

Re: JAVA Filter with ASA Release 7.x

JBDanford2002 — Sat, 30 Jun 2007 13:00:36 GMT

Can you give an example of a site where the java applet is not being blocked?

Re: JAVA Filter with ASA Release 7.x

ehuamannahui — Wed, 25 Jul 2007 05:56:51 GMT

Hello, does anybody knows if that configuration can be set for individual no global, if that's possible what should be the configuration.

Thanks,