15 url filtering configuration, Url filtering overview, Configuring url filtering – H3C Technologies H3C SecBlade IPS Cards User Manual
Page 129: Configuration task list, Url filtering configuration
15-1
15
URL Filtering Configuration
URL Filtering Overview
The Uniform Resource Locator (URL) filtering function is used to filter HTTP requests. URL filtering
includes user-defined URL filtering and category-based URL filtering.
z
User-defined URL filtering: Allows you to specify the matching criteria for a domain name and
Uniform Resource Identifier (URI) path, and configure the corresponding actions on the device.
z
Category-based URL filtering: Refers to the process in which the device, upon receiving an HTTP
request, sends a URL category request to the specified URL category server, obtains the category
result, and processes the HTTP request based on predefined category-based URL filtering rules.
The device does not support category-based URL filtering.
Configuring URL Filtering
Configuration Task List
Perform the tasks in
to configure URL filtering:
Table 15-1 URL filtering configuration task list
Task
Remarks
Configuring Global
Parameters for URL
Filtering
Required
Enable URL filtering, and if required, configure the URL category server, the
HTTP response method, and the target database for log output.
By default, category-based and user-defined URL filtering are both enabled.
Creating and Applying a
URL Filtering Policy
Optional
Create a URL filtering policy, configure filtering rules, and apply the URL filtering
policy to a segment or certain IP addresses on the segment.
By default, there is a URL filtering policy named URL Filter Policy.
z
Before this step, you need to configure the segments on the page you enter
by selecting System Management > Network Management > Segment
Configuration. For more information, see Network Management
Configuration.
z
A URL filtering policy is applied to a segment in the outbound direction or to
certain IP addresses in the internal zone. The IP addresses and excluded IP
addresses are configured for the internal zone.