Cisco Systems ASA 5585-X Network Router User Manual


 
29-4
Cisco ASA Series Firewall CLI Configuration Guide
Chapter 29 Configuring Filtering Services
Configuring Java Applet Filtering
Feature History for ActiveX Filtering
Table 29-1 lists the release history for ActiveX Filtering. ASDM is backwards-compatible with multiple
platform releases, so the specific ASDM release in which support was added is not listed.
Configuring Java Applet Filtering
This section includes the following topics:
Information About Java Applet Filtering, page 29-4
Licensing Requirements for Java Applet Filtering, page 29-4
Guidelines and Limitations for Java Applet Filtering, page 29-5
Configuring Java Applet Filtering, page 29-5
Configuration Examples for Java Applet Filtering, page 29-5
Feature History for Java Applet Filtering, page 29-6
Information About Java Applet Filtering
Java applets may pose security risks because they can contain code intended to attack hosts and servers
on a protected network. You can remove Java applets with the filter java command.
Note Use the filter activex command to remove Java applets that are embedded in <object> tags.
The filter java command filters out Java applets that return to the ASA from an outbound connection.
You still receive the HTML page, but the web page source for the applet is commented out so that the
applet cannot execute. The filter java command does not filter clientless SSL VPN traffic.
Licensing Requirements for Java Applet Filtering
The following table shows the licensing requirements for Java applet filtering:
Table 29-1 Feature History for ActiveX Filtering
Feature Name
Platform
Releases Feature Information
ActiveX filtering 7.0(1) Filters specific undesirable objects from HTTP traffic, such as ActiveX
objects, which may pose a security threat in certain situations.
Table 29-2 Licensing Requirements
Model License Requirement
All models Base License.