To configure an AA URL filter

Purpose

Perform this procedure to configure a URL filter and optional ICAP server or web service for an AQP.

Web services are supported on the following NEs: 7750 SR and 7450 ESS in mixed mode.

Note: To use a web service for AA URL filtering on an ISA-AA Group, the following parameters must be configured on the ISA-AA group:

  • For 7450 ESS or 7750 SR NEs, the Minimum ISA Generation parameter should be set to 2.

    For VSR or VMG NEs, the parameter is set by default.

  • The Web Service Cache Size parameter should be set to 100.

Steps
 
1 

Choose Policies→ISA Policies→Application Assurance from the NFM-P main menu. The Application Assurance Policies form opens.

2 

Click Create→AA URL Filter or select a URL filter entry and click Properties. The AA URL Filter (Create | Edit) form opens.

3 

Configure the parameters.

4 

If the Default Action parameter is set to Block Http Redirect, choose an HTTP Redirect policy.

5 

Choose an ICAP HTTP Redirect policy, if required.

6 

If a web service will be used, configure a Web Server Classify ID and Category Set ID and click Apply.

7 

To configure a local filtering allow list:

  1. Click Select in the Local Filtering panel.

  2. Click Search to populate the list of available URL List policies.

  3. Select a list, or click Create and configure the parameters to create a URL list.

  4. Click OK.

8 

To configure a local filtering deny list:

  1. Click on the Local Filtering Deny List tab.

  2. Click Create. The AA URL Filter Deny List (Create) form opens.

  3. Click Select to select a URL List policy, an HTTP Redirect policy, or both.

    Notes:

    The deny list cannot be the same as the allow list.

    To block HTTP Redirect, the Default Action parameter must be set to Block Http Redirect.

  4. Click OK.

9 

To create an ICAP server entry:

  1. Click on the ICAP Server tab.

  2. Click Create. The AA ICAP Server Entries form opens.

  3. Configure the parameters.

10 

Repeat Step 9 to create an additional ICAP server entry.

11 

To create a web service profile:

  1. Click on the Web Service Profile tab and click Create.

  2. Configure the General parameters.

  3. Click on the Web Service Category sub-tab and click Create.

  4. Click Select and select the URL categories to block.

12 

Repeat Step 11 to create an additional web service profile if needed.

13 

To configure a web service classification override:

  1. Configure the Classifier ID parameter in the Web Service panel on the General tab.

  2. Click on the Web Service Classification Overrides tab.

  3. Click Create. the AA URL Filter Web Service Classification Override (Create) form opens.

  4. Configure the parameters and click OK.

14 

On the General tab, select a Web Service profile as the default profile.

15 

Click Apply to save your changes.

16 

Distribute the policy to NEs, as required.

17 

Close the forms.

End of steps