Cisco 3825 User Guide - Page 52

Block Java and ActiveX Scripts, Block Port Scan Detection - web protection

Page 52 highlights

Configure Security Section Filters Block WAN Requests 52 Field Description Filter Proxy Enables/disables filter proxy. If local users have access to WAN proxy servers, they may be able to circumvent the content filters and access Internet sites blocked by the device. If you select the Filter Proxy feature, it will block access to any WAN proxy servers. Block Pop-Up Windows Enables/disables popup windows. Some commonly used applications employ popup windows as part of the application. If you disable popup windows, it may interfere with some of these applications. Block Web Page Cookies Enables/disables cookie blocking. This feature filters the unsolicited delivery of cookies to devices from the Internet to devices in your private local network. Cookies are computer files that contain personal information or web surfing behavior data. Block Java and ActiveX Scripts Enables/disables java applets and ActiveX scripts. This feature helps to protect the devices in your private network from irritating or malicious Java applets that are sent, unsolicited, to devices in your private network from the Internet. These applets run automatically when they are received by a PC. Java is a programming language for websites. If you select the Filter Java Applets feature, you may not have access to Internet sites created using this programming language. This feature also helps to protect the devices in your private network from irritating or malicious ActiveX controls that are sent, unsolicited, to devices in your private network from the Internet. These ActiveX controls run automatically when they are received by a PC. Block fragmented IP packets Enables/disables filtering of fragmented IP packets. This feature helps protect your private local network from Internet based denial of service attacks. Block Port Scan Detection Enables/disables the gateway from responding to Internet based port scans. This feature is designed to protect your private local network from Internet based hackers who attempt to gain unsolicited access your network by detecting open IP ports on your gateway. Block IP Flood Detection (checked - factory default) Blocks malicious devices that are attempting to flood devices or networks with illegal broadcast packets. Also referred to as "broadcast storm." Block Anonymous Internet Requests (checked - factory default) Enable this feature to keep your network from being "pinged" or detected by other Internet users. The Block Anonymous Internet Requests feature also hides your network ports. Both make it more difficult for outside users to enter your network. 4021196 Rev A

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102

52
4021196 Rev A
Configure Security
Section
Field Description
Filters
Filter Proxy
Enables/disables filter proxy. If local users have access to WAN proxy servers, they
may be able to circumvent the content filters and access Internet sites blocked by
the device. If you select the Filter Proxy feature, it will block access to any WAN
proxy servers.
Block Pop-Up Windows
Enables/disables popup windows. Some commonly used applications employ
popup windows as part of the application. If you disable popup windows, it may
interfere with some of these applications.
Block Web Page Cookies
Enables/disables cookie blocking. This feature filters the unsolicited delivery of
cookies to devices from the Internet to devices in your private local network.
Cookies are computer files that contain personal information or web surfing
behavior data.
Block Java and ActiveX Scripts
Enables/disables java applets and ActiveX scripts. This feature helps to protect the
devices in your private network from irritating or malicious Java applets that are
sent, unsolicited, to devices in your private network from the Internet. These
applets run automatically when they are received by a PC.
Java is a programming language for websites. If you select the Filter Java Applets
feature, you may not have access to Internet sites created using this programming
language.
This feature also helps to protect the devices in your private network from irritating
or malicious ActiveX controls that are sent, unsolicited, to devices in your private
network from the Internet. These ActiveX controls run automatically when they are
received by a PC.
Block fragmented IP packets
Enables/disables filtering of fragmented IP packets. This feature helps protect your
private local network from Internet based denial of service attacks.
Block Port Scan Detection
Enables/disables the gateway from responding to Internet based port scans. This
feature is designed to protect your private local network from Internet based
hackers who attempt to gain unsolicited access your network by detecting open IP
ports on your gateway.
Block IP Flood Detection
(checked – factory default)
Blocks malicious devices that are attempting to flood devices or networks with
illegal broadcast packets. Also referred to as “broadcast storm.”
Block WAN
Requests
Block Anonymous Internet Requests
(checked – factory default)
Enable this feature to keep your network from being "pinged" or detected by other
Internet users. The Block Anonymous Internet Requests feature also hides your
network ports. Both make it more difficult for outside users to enter your network.