Cisco ASA 5505 - Manual (Page 800)

39-4
Cisco ASA 5500 Series Configuration Guide using the CLI
Chapter 39 Configuring Filtering Services
Configuring Java Applet Filtering
Feature History for ActiveX Filtering
Table 39-1 lists the release history for ActiveX Filtering. ASDM is backwards-compatible with multiple
platform releases, so the specific ASDM release in which support was added is not listed.
Configuring Java Applet Filtering
This section includes the following topics:
• Information About Java Applet Filtering, page 39-4
• Licensing Requirements for Java Applet Filtering, page 39-4
• Guidelines and Limitations for Java Applet Filtering, page 39-5
• Configuring Java Applet Filtering, page 39-5
• Configuration Examples for Java Applet Filtering, page 39-5
• Feature History for Java Applet Filtering, page 39-6
Information About Java Applet Filtering
Java applets may pose security risks because they can contain code intended to attack hosts and servers
on a protected network. You can remove Java applets with the filter java command.
Note Use the filter activex command to remove Java applets that are embedded in <object> tags.
The filter java command filters out Java applets that return to the ASA from an outbound connection.
You still receive the HTML page, but the web page source for the applet is commented out so that the
applet cannot execute. The filter java command does not filter clientless SSL VPN traffic.
Licensing Requirements for Java Applet Filtering
The following table shows the licensing requirements for Java applet filtering:
Table 39-1 Feature History for ActiveX Filtering
Feature Name
Platform
Releases
Feature Information
ActiveX filtering 7.0(1) Filters specific undesirable objects from HTTP traffic, such as ActiveX
objects, which may pose a security threat in certain situations.
Table 39-2 Licensing Requirements
Model License Requirement
All models Base License.