Link to home
Start Free TrialLog in
Avatar of amanzoor
amanzoorFlag for Canada

asked on

How to enable java classes in cisco 2811 and where to put those commands.

Hi
I am running server 2003 ent edition domain with cisco 2811 being the firewall.  My XP prof clients have always faced this issue of not seeing some of the pages completely as those webpages have java classes which never loads and the users see blank blocks with java cups example: http://www.colorado.edu/physics/2000/
This site loads perfect but whereever java applet is loaded, users will never see those applets:
Question: How to enable java classes/applets on cisco 2811 and what re the commands and where should I put those commands?
-What is the relation of blocking those classes/applets at the router level with security?
Thanks
Avatar of Les Moore
Les Moore
Flag of United States of America image

Unless you already have them filtered with some very advanced CBAC configurations, the IOS router really doesn't filter out java classes.
Look in the config for something like this:

  ip inspect name inspection-name http java-list <access-list> [timeout seconds]
Avatar of amanzoor

ASKER

Irmoore:
Here are the ip inspect statements I could see on top of my router:  WHich one could that be?
Help plz

ip name-server 216.x.x.x.x
ip name-server 216.x.x.x.x
ip inspect audit-trail
ip inspect name TRAFFIC_INSPECTI tcp
ip inspect name TRAFFIC_INSPECTI udp
ip inspect name TRAFFIC_INSPECTI ftp
ip inspect name TRAFFIC_INSPECTI http
ip inspect name TRAFFIC_INSPECTI tftp
ip inspect name TRAFFIC_INSPECTI cuseeme
ip inspect name TRAFFIC_INSPECTI h323
ip inspect name TRAFFIC_INSPECTI rcmd
ip inspect name TRAFFIC_INSPECTI realaudio
ip inspect name TRAFFIC_INSPECTI sqlnet
 --More--         ip inspect name TRAFFIC_INSPECTI streamworks
ip inspect name TRAFFIC_INSPECTI vdolive
ip inspect name TRAFFIC_INSPECTI dns
ip inspect name TRAFFIC_INSPECTI echo
ip inspect name TRAFFIC_INSPECTI fragment maximum 256 timeout 1
ip inspect name TRAFFIC_INSPECTI https
ip inspect name TRAFFIC_INSPECTI icmp
ip inspect name TRAFFIC_INSPECTI telnet
ip inspect name TRAFFIC_INSPECTI sip
ip inspect name TRAFFIC_INSPECTI skinny
ip inspect name TRAFFIC_INSPECTI smtp
no ip ips deny-action ips-interface
!
no ftp-server write-enable
!
!
ASKER CERTIFIED SOLUTION
Avatar of Les Moore
Les Moore
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial