IOS CONTENT FILTERING

Hi all

Cisco ios content filtering there a cache and a user interface to connect the websites visited and the ip addresses that visit these sites?

Yes, there is action, you can configure under the plan setting.

You can also view using the below command

IOSrouter# sh policy-map type inspect zone-pair urlfilter cache detail

policy exists on zp zp

Zone-pair: zp

Service-policy inspect : trend-global-policy

Class-map: www (match-all)

Match: protocol http

Inspect

Maximum number of bytes in cache: 262144

Time to live for each cache entry (in hrs): 24

Total number of bytes used by cache: 453

Number of bytes used by domain type cache: 353

Number of bytes used by directory type cache: 100

---------------------------------------------------------------------------------------------

URL                                       Age         Idle time/        Cat::Rep

(Directory cache end with /)  (day:h:m:s) access #

-----------------------------------------------------------------------------------------------

yahoo.com                             0:16:47:30           2           56::1

ad.doubleclick.net                 0:00:00:10           1           72::1

static.eharmony.com/static../ 0:00:00:06  0:00:00:04     12::1

Unfortunately, you can not see who has accessed to their.

I hope it helps.

PK

Tags: Cisco Security

Similar Questions

  • Issue of certificate IOS content filtering

    Hello

    Regarding the configuration of the Cisco IOS content filtering, the certificate that must be downloaded from this page (applicationshttp://cisco.com/en/US/products/ps5854/products_configuration_example09186a0080816c23.shtml the router IP address... What happens if it's not a static public ip address and a dynamic?

    Ill be grateful with any input on this...

    Thank you and best regards,

    The cert install page auto request ip address in order to go to the router and the provision by installing cert on this.

    If the router must have http enabled from this page will give you the ip address and the tool will ask you the credentials of the router and connect and install the necessary certificate.

    If the ip address is dynamic bit is important because you will need to install the cert only once.

    I hope it helps.

    PK

  • expiry of ios content filtering

    Hello

    now that the IOS using Trend Micro content filtering is EOL and replaced by ScanSafe, can someone tell if ScanSafe is a subscription based and what are the new SKUS of ScanSafe references

    Thank you

    Yes, Scansafe is on subscription and license of user base.

    in regard to SKU, you might want to contact your representative local Cisco.

  • Content filtering IOS / user / HTTPS

    Hello!

    We are looking for a small client to IOS content filtering and I hope someone can answer a few questions about this quickly.

    (1) can you make content by user, strategies... so different filtering for different users by username? I see that you can do by addy/range of IP, it seems

    (2) can make HTTPS inspection? It wasn't able to earlier, just to check to see if something has changed!

    Thank you!

    Ben

    (1) No, IOS content with trend filtering cannot do by user content filtering.

    (2) it cannot inspect HTTPS too.

    If you want to have both the above, you can go with cloud of ScanSafe, URL filtering and Malware/Spyware Windows. It is supported as well by the user content filtering as well as HTTPS inspection.

    Here is the guide of IOS on Web Filtering of ScanSafe for your reference:

    http://www.Cisco.com/en/us/docs/iOS-XML/iOS/sec_data_zbf/configuration/15-2mt/ScanSafe-Web-sec.html

    http://www.Cisco.com/en/us/docs/security/web_security/ISR_SS/ISR_ScanSafe_SolutionGuide.PDF

    Hope that answers your questions.

  • Download Firefox for Mobile is inhibited because "your content filtering level you cannot download this point." How can I fix my level of content filtering?

    I have a Samsung Galaxy SII with T-Mobile. Model SGH-T989, version 2.3.6 Android #is

    "Content filtering" is the Android Market to limit some applications that can be accessed in "mature" content. You can disable content filtering in the settings of the application market on your phone.

    -Michelle

  • Customize the Web content filtering block Page

    Does anyone how and where I can customize the block page on a SonicWall NSA 240 of web content filtering? Also, I can't using the details I thought I configured, what do you advise for this problem also?

    Kind regards

    RocknRollTim

    You can customize the block page CFS in respect of Security Services > Content Filter > scroll down to bottom & customize it under 'block the Web page to display when '.

  • Doesn´t 'filter' https content filtering

    I RV082 is running the latest firmware if I try to activate web filerfing under "Content filtering" by web address or keyword ony he works for HTTP sites. Lets say, I try to block www.facebook.com I get ""this URL or the Page has been blocked " "

    If I type https://www.facebook.com facebook without problem. It looks that the HTTP protocol is checked and blocked.

    Also if I try to 'Planning' and apply rule from 08:00 to 13:00 it allows me to access it. Am I missing something?

    Hi Mario, HTTPS can not really be blocked unless the router is able to perform a reverse DNS lookup. If you want to block https flavors of a Web site you need a service that can perform the DNS inverted like OpenDNS.

    -Tom
    Please mark replied messages useful

  • Issue with 890 series SRI URL content filtering

    Hello, I'm wondering if anyone can confirm whether or not the URL content filtering subscription available for these routerts has the abiliuty to selectively apply only to users you want.  Or rather, to computers, perhaps by MAC address.  We seek to implement a configuration of whitelist of URLS, but only for the publick workstations.

    Thank you.

    It's been a while but I think that content filtering is done through the MQC (style class-map/policy-map). You could just create a class map for guests you care and then put them through the policy of inspecting it.

  • images of the SSL vpn-html-content filtering

    Hello

    I'm trying to do content filtering via ssl VPN (clientless) on ASA 5505

    Above command is supposed to block anything with the html img tag, but it seems not to do.

    # sh run Group Policy

    Group without internal customer-grp-policy policy

    attributes without customer-grp-policy-group policy

    value of server DNS 8.8.8.8

    VPN-tunnel-Protocol webvpn

    Split-tunnel-policy tunnelall

    WebVPN

    bookmark URL-list value

    filtering the content-HTML-java images cookies

    SVC request to enable default webvpn

    #sh run tunnel-group

    Remote clientless-tunnel tunnel-group type

    attributes global-tunnel-group clientless-tunnel

    without client group policy - by default-grp-policy

    tunnel-group clientless-tunnel webvpn-attributes

    Group-alias clientless-alias enable

    What I'm missing here? or am I just misunderstood how it works?

    Thank you!

    Hello

    How it works for you?

    HTML-content-filter

    Thank you.

    Portu.

  • Website content filtering / Virus detection device

    Hi all

    I'm in the market for a content / url / device for our network of virus scanning. We currently use the Web MXLogic defence service, and while it is very cheap it is not suited to our needs. What I want is a device that will do filtering of content, but also viruses / malware / spyware scan on web traffic. I would also need to be able to setup policies / groups different set of users. For example the people who buy the products we sell must be able to see our content of multimedia (streaming) video sellers so that our sales people don't. I can't currently do with MXLogic, it's all or nothing.

    Our firewall is an ASA5510 and I looked at the module Content Security SSM-10 with the greater license and while the price is really attractive I have a few questions about it. It integrates with MS Active Directory? In other words, and it filters based on policies and groups or more IP / ACL based? Also does perform well?

    I have looked also sell IronPort product cisco and have similar questions about it especially which people experience with it, it's something that you would recommend?

    Hi Allen,.

    To answer your questions related to the CSC module:

    1. No, the CSC module does not fit with Active Directory. It's something that Trend Micro has in the works, but right now, there is no ETA for this feature.

    2. the module CSC happen enough well if used in the environment it was designed for. I recommend watching CSC sizing guide to see if the CSC-SSM-10 would be something that is scalable enough for your network:

    http://www.Cisco.com/en/us/prod/collateral/vpndevc/ps6032/ps6094/ps6120/prod_white_paper0900aecd805c3cd6.html

    I can't speak to the performance/features of IronPort like I the have not used personally, but I've heard good things. Also, external devices of Websense seem to be a popular choice when you need a product that is a little more scalable or granular than can provide the CSC module.

    Hope that helps.

    -Mike

  • DataBind method call returns null in the WebCenter content filtering

    Hello

    I got code that has a problem and I am new to the WebCenter content and filters that can be added. We have a FileNameFilter class that begins with the code

    / public class CWEFileNameFilter implements FilterImplementor {}

    public CWEFileNameFilter() {}

    Super();

    }

    public int doFilter (workspace workspace, DataBinder dataBinder,

    ExecutionContext executionContext) throw {DataException

    Service string = dataBinder.getLocal ("IdcService");

    ....

    }

    }

    However, service is sometimes return null and then filter throws a NPE.

    My questions are:

    (1) can we explain what dataBinder.getLocal ("IdcService"); is done and why it might come back as null

    (2) anyone can provide links to documentation that explains the filters and a little more on the object DataBinder as the JavaDoc is not much help.

    Thank you
    Marc

    Hi Marc,

    Below the code will give the name of the service for which the filter is implemented LocalData

    Service string = dataBinder.getLocal ("IdcService");

    for example below

    http://localhost:16200/cs/idcplg? IdcService = DOC_INFO_BY_NAME & dDocName = 1111111 & IsJava

    This example displays the entire response including localdata data and results that are created in the execution of the service. Here is the code snippet

    LocalData @Properties

    DocUrl =https://localhost:16200/cs/weblayout/groups/secure/documents/test/mhdk/mjg1/1111111.pdf

    IdcService = DOC_INFO_BY_NAME

    If String = dataBinder.getLocal ("IdcService") service; Service = "DOC_INFO_BY_NAME."

    Under blog will give an idea about the filter but the best place to learn or start is "The Definitive Guide to Stellent Content Server Development" by Brian Huff

    http://www.redstonecontentsolutions.com/technical-blog/UCM-service-handlers-and-javafilters

    Also, I recommend reading ' WebCenter Content Services Reference Guide '

    http://docs.Oracle.com/CD/E23943_01/doc.1111/e11011/TOC.htm

    Kind regards

    Amol Germain.

  • PIX content filtering

    Dear Forum,

    our software is data tunneling (CPP-calls etc.) using http to go through the firewall on port 80.

    One of our clients has a pix. The pix is the removal of the content from our http requests.

    We found that, by using a packet sniffer. We checked the package before its entry in the pix

    and checked how it came out.

    We do not have access to set up this pix, it is done by another company.

    I'm thingking to get another customer a pix, but I want to assure you, that the pix is not messing around to the top of our traffic. Is it possible to disable this feature?

    Thank you!

    Concerning

    Christian

    I think you should test your software with the configuration on the pix with 'no fixup protocol http 80'

  • Lists numbered with dynamic content filtering

    I couldn't find this information anywhere, although I imagine that I'm probably not the first person to experience this problem...

    I have a few issues where the steps in the procedures are present numbered lists. I use the conditional tags build on some of the numbered steps to filter the when specific filters are applied in the output of Responsive HTML5. When I look at a topic in preview mode and apply filters, list numbers automatically renumber to avoid skipping numbers. However, when the output and then apply the filter, the lines disappear as expected, but numbered lists jump filtered numbers.

    For example:

    ex 1.PNG

    This filter as indicated in the overview:

    ex 2.PNG

    But in the generated output, the numbering is far:

    ex 3.PNG

    Is it possible to get this number right?

    Yes, just tested on my end with a multiple numbered list. And in this type of list, things go to pot!

    Seems that the solution is to avoid using this type of list. Pretty easy to accomplish. Select the first and the last bit of list and click the multilevel. then simply apply numbers.

    See you soon... Rick

  • How can I create in RoboHelp 2015 dynamic content filtering?

    I would like to know step by step.

    I tried already several times, without success.

    My idea is that end users can see content according to the options chosen by them. I tried to apply conditional build tags to topics, but it did not work.

    I also tried to create expressions for my build labels (for example, see one, but do not show B and C), but something was wrong in the process.

    To set this feature is perhaps more difficult than I thought. If someone could help me, I appreaciate it.

    Thanks in advance!

    Hello again

    I just uploaded a short video showing the process. See if it helps to make sense of things.

    Click here to see

    See you soon... Rick

  • Content filtering to display in the table of contents with Actions (possibly using ActionScript?)

    I have 7 Captivate and would like to know if it is possible to filter some slides of OCD.

    The point here is that they may not be static, but change the slides to show transparently based on the choice of the user.

    == Example ==

    You have a file containing below 3 slides captivate. (A, B, C)

    And each slide content is needed for the subject in []. (I, II, III)

    A [I, II AND III]

    B [II, III]

    C [I, III]

    Lets say the user wants to know about the topic-II.

    While the user should only see slides A and B.

    If the user wants to know on the subject-I, then only slides A and C are shown in the table of contents.

    == == End of example

    In my view, that's not possible with only using Captivate and research to achieve anyway. (for example. Load the captivate through Flash and control the captivate Flash with AS3 file).

    Thanks in advance for your help.

    You have no control of this type on the default TOC THAT included with Captivate. You can have this control, if you create a custom table of contents and use advanced/variables actions. Advanced actions are converted on the duration of AS3 (for SWF) or JS (for HTML5). Since you talk about Flash, I assume you want SWF-output. I know a lot about system variables supplied, there may be some hidden variables that you can solve with AS3 or (better IMO) with JS, but only system variables for the table of contents is to lock or hide/show it (if in overlay).

Maybe you are looking for

  • SSD update for HP Pavilion dv8338ea.

    Hi HP'ers! Searched around with no luck. My father upgraded his laptop with an SSD, but I'm not sure if it's a PATA or SATA. Although I can't find any information about the specs on the machine, the section of the driver revealed he want to "Intel Ma

  • Errors-1074115896 and-1074116169 waves named rewriting on SMU 6556

    I am running trouble during re - writing of waveforms of a DIO SMU 6556 at high speed, which means to run the 'writing called wave vi' with a previously issued name before. Although this is possible according to the help files, that I constantly meet

  • How can I get rid of the server box that keeps popping up every 2 seconds?

    The area of the server is a small box that has my server, the user name and the password.  Then has the small checkbox next to save this password in your password list.  Then has 2 small boxes under this sentence that says ok and cancel.  Upward into

  • BlackBerry JDE for Eclipse gives sign of error on the file BlackBerry_App_Descriptor.XML

    Mr President. I changed the system from XP to Windows 7... After the installation of JDE for Eclipse, it gives error sign only on the BlackBerry_App_Descriptor.xml file, and the code is fine... Please suggest the solution...

  • Disable the Caps/Num Lock Indicator

    So I have this REALLY annoying indicator and I cannot figure out how to turn off. He appeared just today after my keyboard locked out of the blue. I have not installed new drivers in more than a week or 2. It is also on a desktop computer assembled b