Doesn´t 'filter' https content filtering

I RV082 is running the latest firmware if I try to activate web filerfing under "Content filtering" by web address or keyword ony he works for HTTP sites. Lets say, I try to block www.facebook.com I get ""this URL or the Page has been blocked " "

If I type https://www.facebook.com facebook without problem. It looks that the HTTP protocol is checked and blocked.

Also if I try to 'Planning' and apply rule from 08:00 to 13:00 it allows me to access it. Am I missing something?

Hi Mario, HTTPS can not really be blocked unless the router is able to perform a reverse DNS lookup. If you want to block https flavors of a Web site you need a service that can perform the DNS inverted like OpenDNS.

-Tom
Please mark replied messages useful

Tags: Cisco Support

Similar Questions

  • Content filtering IOS / user / HTTPS

    Hello!

    We are looking for a small client to IOS content filtering and I hope someone can answer a few questions about this quickly.

    (1) can you make content by user, strategies... so different filtering for different users by username? I see that you can do by addy/range of IP, it seems

    (2) can make HTTPS inspection? It wasn't able to earlier, just to check to see if something has changed!

    Thank you!

    Ben

    (1) No, IOS content with trend filtering cannot do by user content filtering.

    (2) it cannot inspect HTTPS too.

    If you want to have both the above, you can go with cloud of ScanSafe, URL filtering and Malware/Spyware Windows. It is supported as well by the user content filtering as well as HTTPS inspection.

    Here is the guide of IOS on Web Filtering of ScanSafe for your reference:

    http://www.Cisco.com/en/us/docs/iOS-XML/iOS/sec_data_zbf/configuration/15-2mt/ScanSafe-Web-sec.html

    http://www.Cisco.com/en/us/docs/security/web_security/ISR_SS/ISR_ScanSafe_SolutionGuide.PDF

    Hope that answers your questions.

  • Customize the Web content filtering block Page

    Does anyone how and where I can customize the block page on a SonicWall NSA 240 of web content filtering? Also, I can't using the details I thought I configured, what do you advise for this problem also?

    Kind regards

    RocknRollTim

    You can customize the block page CFS in respect of Security Services > Content Filter > scroll down to bottom & customize it under 'block the Web page to display when '.

  • IOS CONTENT FILTERING

    Hi all

    Cisco ios content filtering there a cache and a user interface to connect the websites visited and the ip addresses that visit these sites?

    Yes, there is action, you can configure under the plan setting.

    You can also view using the below command

    IOSrouter# sh policy-map type inspect zone-pair urlfilter cache detail

    policy exists on zp zp

    Zone-pair: zp

    Service-policy inspect : trend-global-policy

    Class-map: www (match-all)

    Match: protocol http

    Inspect

    Maximum number of bytes in cache: 262144

    Time to live for each cache entry (in hrs): 24

    Total number of bytes used by cache: 453

    Number of bytes used by domain type cache: 353

    Number of bytes used by directory type cache: 100

    ---------------------------------------------------------------------------------------------

    URL                                       Age         Idle time/        Cat::Rep

    (Directory cache end with /)  (day:h:m:s) access #

    -----------------------------------------------------------------------------------------------

    yahoo.com                             0:16:47:30           2           56::1

    ad.doubleclick.net                 0:00:00:10           1           72::1

    static.eharmony.com/static../ 0:00:00:06  0:00:00:04     12::1

    Unfortunately, you can not see who has accessed to their.

    I hope it helps.

    PK

  • Issue of certificate IOS content filtering

    Hello

    Regarding the configuration of the Cisco IOS content filtering, the certificate that must be downloaded from this page (applicationshttp://cisco.com/en/US/products/ps5854/products_configuration_example09186a0080816c23.shtml the router IP address... What happens if it's not a static public ip address and a dynamic?

    Ill be grateful with any input on this...

    Thank you and best regards,

    The cert install page auto request ip address in order to go to the router and the provision by installing cert on this.

    If the router must have http enabled from this page will give you the ip address and the tool will ask you the credentials of the router and connect and install the necessary certificate.

    If the ip address is dynamic bit is important because you will need to install the cert only once.

    I hope it helps.

    PK

  • images of the SSL vpn-html-content filtering

    Hello

    I'm trying to do content filtering via ssl VPN (clientless) on ASA 5505

    Above command is supposed to block anything with the html img tag, but it seems not to do.

    # sh run Group Policy

    Group without internal customer-grp-policy policy

    attributes without customer-grp-policy-group policy

    value of server DNS 8.8.8.8

    VPN-tunnel-Protocol webvpn

    Split-tunnel-policy tunnelall

    WebVPN

    bookmark URL-list value

    filtering the content-HTML-java images cookies

    SVC request to enable default webvpn

    #sh run tunnel-group

    Remote clientless-tunnel tunnel-group type

    attributes global-tunnel-group clientless-tunnel

    without client group policy - by default-grp-policy

    tunnel-group clientless-tunnel webvpn-attributes

    Group-alias clientless-alias enable

    What I'm missing here? or am I just misunderstood how it works?

    Thank you!

    Hello

    How it works for you?

    HTML-content-filter

    Thank you.

    Portu.

  • The checkbox 'filter the content bin' is no longer an option? If this is the case, where can I find it?

    The checkbox 'filter the content bin' is no longer an option? If this is the case, where can I find it?

    The mention 'Content filter Bin' simply refers in the name of the search in question box. You might also occasionally see it called in the "quick search". The search box works the same, albeit much more quickly than in previous versions and it is essentially a search "on-line". In other words, when you type in the box, any project item that matches the text you enter will be filtered in the view and those who do not will be hidden.

    Unlike the previous version of Premiere Pro that you reference in the book, it's that Pr is used to provide a history of searches through the menu drop down. This has been removed because it was part of the slow pace of research and in its place is the search bins feature (it's the button with the folder with the magnifying glass top just to the right of the search box). In the box type a search query, and then create a new bin of research using this button to create a bin in your project that you can view to always see the correspondence of the elements without having to perform the search again. Read more about it here: find assets

  • Download Firefox for Mobile is inhibited because "your content filtering level you cannot download this point." How can I fix my level of content filtering?

    I have a Samsung Galaxy SII with T-Mobile. Model SGH-T989, version 2.3.6 Android #is

    "Content filtering" is the Android Market to limit some applications that can be accessed in "mature" content. You can disable content filtering in the settings of the application market on your phone.

    -Michelle

  • expiry of ios content filtering

    Hello

    now that the IOS using Trend Micro content filtering is EOL and replaced by ScanSafe, can someone tell if ScanSafe is a subscription based and what are the new SKUS of ScanSafe references

    Thank you

    Yes, Scansafe is on subscription and license of user base.

    in regard to SKU, you might want to contact your representative local Cisco.

  • Issue with 890 series SRI URL content filtering

    Hello, I'm wondering if anyone can confirm whether or not the URL content filtering subscription available for these routerts has the abiliuty to selectively apply only to users you want.  Or rather, to computers, perhaps by MAC address.  We seek to implement a configuration of whitelist of URLS, but only for the publick workstations.

    Thank you.

    It's been a while but I think that content filtering is done through the MQC (style class-map/policy-map). You could just create a class map for guests you care and then put them through the policy of inspecting it.

  • You have reached the maximum of pages in this set of results of content. If you are looking for something specific, try applying a filter of content type or enter a search term.

    I get error frequently below.  In General, when you navigate on old posts on the forum SQL and PL/SQL, after reading a post, I click on the left arrow in my Firefox browser, which I expect to take me to the page of the posts that I had.  Instead, I get a page with no messages.  I then click on a forum page numbers in the upper right corner.  Sometimes brings back me to the page that displays the list of the posts that I had.  However, more often I get the below error.  So try to navigate from one position to another is desperately slow.  You can fix this?  Everybody brings a work around to be able to get from one station to another, or at least back to old messages without the error page?  This is a problem that happened before and after the upgrade.

    "You have reached the maximum of pages in this set of results of content. If you are looking for something specific, try applying a filter of content type or enter a search term. »

    Have you tried right-click (ctrl-click on Mac) and choose 'Open link in a new tab' instead? With all the dynamic html today browser back and before options are often dead still. If you open links in a new tab or window, you can simply close the window instead of using the back button. It may take awhile to get used to it, but there are some benefits, such as the loading of the pages in the background, and you do not lose the focus of the page where you. You can disable "when I open a link in a new tab, swtich it immediately." If I understand your problem, maybe it works better.

  • Content filtering

    I am looking for a way to filter the contents of a portfolio site I'm currently building in Adobe Muse.

    Ideally, I would like to only filter the work of folio by:

    Discipline (brand design, website design, design, printing and Illustration)

    Industry (training, music, Arts, etc.)

    Customer

    Anyone here have any ideas on how I could do this?

    Thank you!

    Please refer to a similar debate here:

    Is it possible to create a filter in Muse function?

    Thank you

    Sanjit

  • DataBind method call returns null in the WebCenter content filtering

    Hello

    I got code that has a problem and I am new to the WebCenter content and filters that can be added. We have a FileNameFilter class that begins with the code

    / public class CWEFileNameFilter implements FilterImplementor {}

    public CWEFileNameFilter() {}

    Super();

    }

    public int doFilter (workspace workspace, DataBinder dataBinder,

    ExecutionContext executionContext) throw {DataException

    Service string = dataBinder.getLocal ("IdcService");

    ....

    }

    }

    However, service is sometimes return null and then filter throws a NPE.

    My questions are:

    (1) can we explain what dataBinder.getLocal ("IdcService"); is done and why it might come back as null

    (2) anyone can provide links to documentation that explains the filters and a little more on the object DataBinder as the JavaDoc is not much help.

    Thank you
    Marc

    Hi Marc,

    Below the code will give the name of the service for which the filter is implemented LocalData

    Service string = dataBinder.getLocal ("IdcService");

    for example below

    http://localhost:16200/cs/idcplg? IdcService = DOC_INFO_BY_NAME & dDocName = 1111111 & IsJava

    This example displays the entire response including localdata data and results that are created in the execution of the service. Here is the code snippet

    LocalData @Properties

    DocUrl =https://localhost:16200/cs/weblayout/groups/secure/documents/test/mhdk/mjg1/1111111.pdf

    IdcService = DOC_INFO_BY_NAME

    If String = dataBinder.getLocal ("IdcService") service; Service = "DOC_INFO_BY_NAME."

    Under blog will give an idea about the filter but the best place to learn or start is "The Definitive Guide to Stellent Content Server Development" by Brian Huff

    http://www.redstonecontentsolutions.com/technical-blog/UCM-service-handlers-and-javafilters

    Also, I recommend reading ' WebCenter Content Services Reference Guide '

    http://docs.Oracle.com/CD/E23943_01/doc.1111/e11011/TOC.htm

    Kind regards

    Amol Germain.

  • Website content filtering / Virus detection device

    Hi all

    I'm in the market for a content / url / device for our network of virus scanning. We currently use the Web MXLogic defence service, and while it is very cheap it is not suited to our needs. What I want is a device that will do filtering of content, but also viruses / malware / spyware scan on web traffic. I would also need to be able to setup policies / groups different set of users. For example the people who buy the products we sell must be able to see our content of multimedia (streaming) video sellers so that our sales people don't. I can't currently do with MXLogic, it's all or nothing.

    Our firewall is an ASA5510 and I looked at the module Content Security SSM-10 with the greater license and while the price is really attractive I have a few questions about it. It integrates with MS Active Directory? In other words, and it filters based on policies and groups or more IP / ACL based? Also does perform well?

    I have looked also sell IronPort product cisco and have similar questions about it especially which people experience with it, it's something that you would recommend?

    Hi Allen,.

    To answer your questions related to the CSC module:

    1. No, the CSC module does not fit with Active Directory. It's something that Trend Micro has in the works, but right now, there is no ETA for this feature.

    2. the module CSC happen enough well if used in the environment it was designed for. I recommend watching CSC sizing guide to see if the CSC-SSM-10 would be something that is scalable enough for your network:

    http://www.Cisco.com/en/us/prod/collateral/vpndevc/ps6032/ps6094/ps6120/prod_white_paper0900aecd805c3cd6.html

    I can't speak to the performance/features of IronPort like I the have not used personally, but I've heard good things. Also, external devices of Websense seem to be a popular choice when you need a product that is a little more scalable or granular than can provide the CSC module.

    Hope that helps.

    -Mike

  • ITS filter - adding several filters with the same custom attribute

    Hello

    I added the attributes of custom search and am able to add a filter to the doOracleSearch method.

    filter [0] = new filter (New Integer (100), 'NUMBER', 'equal', 10020);

    Now I have to add another filter for the same attribute of research with or condition, how can I do this...

    I tried the following...

    filter [0] = new filter (New Integer (100), 'NUMBER', 'equal', 10020);
    filter [1] = new filter (New Integer (100), 'NUMBER', 'equal', 10049);

    But how do I specify it's or and the code above does not work.

    Thank you.
    Vermorel.

    Here is an example of this using 11 g. Note that you need to connect programmatically if the data is secure.

    Create the search service and to define the URL of SOAP
    SearchService OracleSearchService = new OracleSearchService();
    searchService.setSoapURL ("http://myserver:7777/recherche/requete/oraclesearch"); ")

    Download the data to the research group
    DataGroup dataGroup = new DataGroup();
    dataGroup.setGroupName ("MyGroup");
    DataGroup dataGroups [] = new DataGroup [1];
    dataGroups [0] = dataGroup;

    Get a list of all the attributes to fetch
    Attribute [] attributesAll = searchService.getAllAttributes("en");
    ArrayList attributeIds = new ArrayList ();
    for (attribute a: attributesAll)
    {
    attributeIds.add (a.getId ());
    }
    Integer [] attributeIdArrayAll = Integer [attributeIds.size (new)];
    attributeIdArrayAll = attributeIds.toArray (attributeIdArrayAll);

    Create filters (BE sure THAT THE FILTER ID IS CORRECT - I do not pretend you code it but rather browse the list of all of the above attributes and get ID like that)
    Filter [] myFilters is new filter [2];.
    myFilters [0] = new filter (124, "Number", "EQUAL", "129224");
    myFilters [1] = new filter (124, "Number", "EQUAL", "123730");

    Request (be SURE to USE ' or ' as the operator between the filters)
    Result OracleSearchResult = searchService.doOracleSearch ("", 0, 50, false, false, dataGroups, "fr", null, true, 'or', myFilters, attributeIdArrayAll);

    Get number
    int hits = result.getEstimatedHitCount () .intValue ();

    Print results
    ResultElement [] resElements = result.getResultElements ();
    for (int i = 0; i)< reselements.length;="">
    {
    Download the document
    ResultElement doc = resElements;
    }

    I hope this helps!

Maybe you are looking for