H3C Technologies H3C SecPath F1000-E - Manual (Page 103)

4
To do... Use the command... Remarks
Enter system view system-view —
Add an ActiveX blocking suffix
keyword
firewall http
activex-blocking suffix
keywords
Optional
Display information about ActiveX
blocking
display firewall http
activex-blocking [ all | item
keywords | verbose ]
Optional
NOTE:
In the ACL for ActiveX blocking, you need to configure the source IP addresses as the IP addresses of the
HTTP servers allowed to be accessed and set the action to permit.
Displaying and Maintaining Web Filtering
To do... Use the command... Remarks
Display information about URL
parameter filtering
display firewall http
url-filter parameter [ all |
item keywords | verbose ]
Available in any view
Display information about Java
blocking
display firewall http
java-blocking [ all | item
keywords | verbose ]
Available in any view
Display information about ActiveX
blocking
display firewall http
activex-blocking [ all | item
keywords | verbose ]
Available in any view
Clear Web filtering statistics
reset firewall http
{ activex-blocking |
java-blocking | url-filter
parameter } counter
Available in user view
Web Filtering Configuration Examples
URL Parameter Filtering Configuration Example
Network requirements
The hosts in the network segment 192.168.1.0/24 access the Internet through Device. The device is
enabled with the URL parameter filtering function, which uses the user-defined filtering entry group to
filter HTTP requests.