H3C Technologies H3C SecPath F1000-E - Manual (Page 694)

24
Figure 31 Configure the interzone policy referencing the template with Java applet blocking
• Type 2 in the Rule ID text box.
• Select any_address as the source IP address and destination IP address.
• Select Permit as the filter action.
• Select content filtering policy template template2.
• Click Apply.
Verification
After the above configurations, LAN users cannot receive HTTP responses that carry keyword sex,
cannot send Java applet requests to Web servers except server 5.5.5.5, and cannot send emails
with .exe attachments.
After the device runs for a period of time, select Identification > Content Filtering > Statistic
Information from the navigation tree. You can see the content filtering statistics, as shown in
Figure 32 .