We help IT Professionals succeed at work.

asa5505 filtering active content

mikey250
mikey250 asked
on
138 Views
Last Modified: 2016-03-31
hi ive configured asa5505 as a firewall out of the box & the following as per my asa5505 basic license permits as per my step by step book:

- ip spoofing
- preventing fragmented packets
- intrusion prevention

it also states to set 'filtering dynamic content' ie by accessing:

http://realapplets.com/applets/ - for example then do the following:

- filter java 80 0 0 0 0

question 1.  If i decided to install java on my machine or if i do not what will this impact or stop a normal user if allowing them to browse the internet anyway ?
Comment
Watch Question

Ernie BeekSenior infrastructure engineer
CERTIFIED EXPERT
Top Expert 2012

Commented:
Never tried it but it should only block java applets and functionality. So for the rest users should still be able to browse, only java won't work.

Author

Commented:
ok so if i was to i stall asdm or solarwinds then it would block me ?
Ernie BeekSenior infrastructure engineer
CERTIFIED EXPERT
Top Expert 2012

Commented:
Don't think so. Because ASDM connect to the ASA and not through the ASA. And you would never be able to use those settings when using ASDM because then you would get blocked. Wouldn't be logical would it?

Author

Commented:
Just thought i would ask because wjen i installed sdm on my xp & asdm for asa i was prompted to install java 6.... not 8 due to opening a browser.
Ernie BeekSenior infrastructure engineer
CERTIFIED EXPERT
Top Expert 2012

Commented:
I think that might have to do with XP not being supported anymore. Plus there are issues with certain versions of java 7 with ASDM.
So there might be ways to use java 8 with XP, it's officially not supported.

Author

Commented:
qns1.  ok. I just got the impression all java wont work even though i added "filter java 8 0 0 0 0"...so does that all javas....?

qns2.  the above is correct how do i allow only 1 machine to use java ?
Senior infrastructure engineer
CERTIFIED EXPERT
Top Expert 2012
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION

Author

Commented:
ok thanks.

Author

Commented:
sound advice.

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.