Cisco 7604 Configuration Guide - Page 365

Chapter 18 Applying Filtering Services Filtering URLs and FTP Requests with an External Server Identify the address of the filtering server using the url-server command: For Websense: hostname(config)# url-server (if_name) vendor websense host local_ip [timeout seconds] [protocol {TCP | UDP | connections num_conns] | version 4][context-name] Note The context-name option is only available with websense version 4.0 and not with verion 1.0, and this feature can be configured only in multiple context mode. For Secure Computing SmartFilter (formerly N2H2): hostname(config)# url-server (if_name) vendor {smartfilter | n2h2} host [port ] [timeout ] [protocol {TCP [connections ]} | UDP] where is the name of the security appliance interface connected to the filtering server. For the vendor {smartfilter | n2h2}, you can use 'ssmartfilter as a vendor string, however, 'n2h2' is acceptable for backward compatibility. When the configuration entries are generated, 'smartfilter' is saved as the vendor string. The host is the IP address of the URL filtering server. The port is the Secure Computing SmartFilter server port number of the filtering server; the FWSM also listens for UDP replies on this port. Note The default port is 4005. This is the default port used by the Secure Computing SmartFilter server to communicate to the FWSM via TCP or UDP. For information on changing the default port, see the Filtering by N2H2 Administrator's Guide. The timeout is the number of seconds the security appliance should keep trying to connect to the filtering server. The connections is the number of tries to attempt to make a connection between the host and server. Context-name sends each websense query for policy lookups on the websense server. For example, to identify a single Websense filtering server, enter the following command: hostname(config)# url-server (perimeter) host 10.0.1.1 protocol TCP version 4 This identifies a Websense filtering server with the IP address 10.0.1.1 on a perimeter interface of the FWSM.Version 4, which is enabled in this example, is recommended by Websense because it supports caching. To identify redundant Secure Computing SmartFilter servers, enter the following commands: hostname(config)# url-server (perimeter) vendor n2h2 host 10.0.1.1 hostname(config)# url-server (perimeter) vendor n2h2 host 10.0.1.2 This identifies two Sentian filtering servers, both on a perimeter interface of the FWSM. OL-20748-01 Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM 18-5