Cisco Systems ASA 5580 Manual De Usuario
29-10
Cisco ASA Series Firewall CLI Configuration Guide
Chapter 29 Configuring Filtering Services
Filtering URLs and FTP Requests with an External Server
Configuring Additional URL Filtering Settings
After you have accessed a website, the filtering server can allow the ASA to cache the server address for
a certain period of time, as long as each website hosted at the address is in a category that is permitted
at all times. When you access the server again, or if another user accesses the server, the ASA does not
need to consult the filtering server again to obtain the server address.
a certain period of time, as long as each website hosted at the address is in a category that is permitted
at all times. When you access the server again, or if another user accesses the server, the ASA does not
need to consult the filtering server again to obtain the server address.
Note
Requests for cached IP addresses are not passed to the filtering server and are not logged.
As a result, this activity does not appear in any reports.
As a result, this activity does not appear in any reports.
This section describes how to configure additional URL filtering settings and includes the following
topics:
topics:
•
•
•
•
•
Buffering the Content Server Response
When you issue a request to connect to a content server, the ASA sends the request to the content server
and to the filtering server at the same time. If the filtering server does not respond before the content
server, the server response is dropped. This behavior delays the web server response for the web client,
because the web client must reissue the request.
and to the filtering server at the same time. If the filtering server does not respond before the content
server, the server response is dropped. This behavior delays the web server response for the web client,
because the web client must reissue the request.
By enabling the HTTP response buffer, replies from web content servers are buffered, and the responses
are forwarded to the requesting client if the filtering server allows the connection. This behavior prevents
the delay that might otherwise occur.
are forwarded to the requesting client if the filtering server allows the connection. This behavior prevents
the delay that might otherwise occur.
To configure buffering for responses to HTTP or FTP requests, enter the following command:
Command
Purpose
Step 1
url-block block
block-buffer-limit
Example:
ciscoasa# url-block 3000
Enables buffering of responses for HTTP or FTP requests that are
pending a response from the filtering server.
pending a response from the filtering server.
Replaces block-buffer with the maximum number of HTTP
responses that can be buffered while awaiting responses from the
URL server.
responses that can be buffered while awaiting responses from the
URL server.
Note
Buffering of URLs longer than 3072 bytes is not
supported.
supported.
Step 2
url-block mempool-size
memory-pool-size
Example:
ciscoasa# url-block mempool-size 5000
Configures the maximum memory available for buffering pending
URLs (and for buffering long URLs).
URLs (and for buffering long URLs).
Replaces memory-pool-size with a value from 2 to 10240 for a
maximum memory allocation of 2 KB to 10 MB.
maximum memory allocation of 2 KB to 10 MB.