JAVA Filter with ASA Release 7.x

[herbert.aichhorn]

Hi

I am trying to configure Java filter on ASA Rel 7.2.2. I am not sure why sometimes my config filters Java applets and sometimes not. The documentation it is mentioned that http inspect is necessary with the filter commands.

The same sites are correct filtered with IOS inspects and PIX 6.3 filter commands.

the configuration:

policy-map type inspect http http1

parameters

match response body java-applet

mask

match response body active-x

mask

policy-map global_policy

class inspection_default

inspect http http1

filter java 80 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0

filter activex 80 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0

service-policy global_policy global

regards,

Herbert

[JBDanford2002]

Can you give an example of a site where the java applet is not being blocked?

[ehuamannahui]

Hello, does anybody knows if that configuration can be set for individual no global, if that's possible what should be the configuration.

Thanks,