1. 程式人生 > >asa高級用法

asa高級用法

eset als 高級 author request pro type any ont


regex URL01 "\.taobao\.com"
regex URL02 "\.jd\.com"
regex URL03 "\.youku\.com"

class-map type regex match-any url01_class
 match regex URL01

class-map type regex match-any url02_class
 match regex URL02

class-map type regex match-any url03_class
 match regex URL03


class-map type inspect http match-all http01_url_class 
 match request header host  regex class url01_class

class-map type inspect http match-all http02_url_class
 match request header host  regex class url02_class 

class-map type inspect http match-all http03_url_class
 match request header host  regex class url03_class 


class-map type  inspect  http  match-all http_application 
 match request header content-type application/pdf
 match request header content-type video/flc
 match request header content-type video/mpeg
 match request header content-type application/x-msn-messenger
 match request header proxy-authorization length gt 80


policy-map type inspect http http_url_policy 
class http01_url_class 
  drop-connection log 
class http02_url_class 
  drop-connection log 
class http03_url_class 
  drop-connection log 
class http_application
  reset 

policy-map global_policy 
 class inspection_default 
  inspect http http_url_policy


asa高級用法