{"id":8138,"date":"2012-03-21T12:25:43","date_gmt":"2012-03-21T12:25:43","guid":{"rendered":"http:\/\/tajdini.net\/blog\/2012\/03\/21\/cisco-download-restriction\/"},"modified":"2012-03-21T12:25:43","modified_gmt":"2012-03-21T12:25:43","slug":"cisco-download-restriction","status":"publish","type":"post","link":"https:\/\/tajdini.net\/blog\/application-and-software-security\/cisco-download-restriction\/","title":{"rendered":"\u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0627\u0646\u0644\u0648\u062f \u062f\u0631 \u062f\u06cc\u0648\u0627\u06cc\u0633 \u0647\u0627\u06cc \u0633\u06cc\u0633\u06a9\u0648"},"content":{"rendered":"

\u062f\u0631 \u0645\u0628\u0627\u062d\u062b \u0627\u0645\u0646\u06cc\u062a \u0634\u0628\u06a9\u0647 \u0645\u0628\u062d\u062b Web Filtering \u06cc\u06a9\u06cc \u0627\u0632 \u0645\u0642\u0648\u0644\u0647 \u0647\u0627\u06cc \u0628\u0633\u06cc\u0627\u0631 \u0645\u0647\u0645\u06cc \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 Internet sharing \u0628\u0633\u06cc\u0627\u0631 \u0628\u0647 \u0622\u0646 \u062a\u0648\u062c\u0647 \u0645\u06cc \u0634\u0648\u062f \u0648 \u0627\u06a9\u062b\u0631 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0647\u0627 \u0648 \u06cc\u0627 \u0633\u062e\u062a \u0627\u0641\u0632\u0627\u0631 \u0647\u0627\u06cc Firewall \u0648 Internet Sharing \u0645\u062b\u0644 \u0631\u0648\u062a\u0631 \u0628\u0647 \u0646\u062d\u0648\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0642\u0627\u0628\u0644\u06cc\u062a \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc \u0645\u06cc \u06a9\u0646\u0646\u062f. \u0628\u0637\u0648\u0631 \u0645\u062b\u0627\u0644 \u062f\u0631 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 ISA Server \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 URL Set \u060c \u062f\u0631 Fortinet \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0645\u0627\u0698\u0648\u0644 web filtering \u0648 \u062f\u0631 Cisco IOS \u0645\u062b\u0644 Router \u0648 PIX \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Web Sense \u0648 \u06cc\u0627 N2H2 \u0645\u06cc \u062a\u0648\u0627\u0646 \u0627\u06cc\u0646 \u06a9\u0627\u0631 \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u062f\u0627\u062f. \u0627\u0645\u0627 \u062f\u0631 \u0628\u0631\u062e\u06cc \u0645\u0648\u0627\u0631\u062f \u0645\u0634\u06a9\u0644\u06cc \u06a9\u0647 \u0645\u062f\u06cc\u0631\u0627\u0646 \u0628\u0627 \u0622\u0646 \u0631\u0648\u0628\u0631\u0648 \u0647\u0633\u062a\u0646\u062f \u0641\u06cc\u0644\u062a\u0631\u06cc\u0646\u06af \u0646\u0645\u06cc \u0628\u0627\u0634\u062f \u0628\u0644\u06a9\u0647 “\u0645\u062d\u062f\u0648\u062f\u06cc\u062a download” \u0645\u06cc \u0628\u0627\u0634\u062f.  \u0627\u0635\u0648\u0644\u0627 download \u06a9\u0631\u062f\u0646 \u0639\u0627\u0645\u0644 \u0627\u0635\u0644\u06cc \u067e\u0631 \u0634\u062f\u0646 \u0638\u0631\u0641\u06cc\u062a \u067e\u0647\u0646\u0627\u06cc \u0628\u0627\u0646\u062f \u0645\u06cc \u0634\u0648\u062f \u06a9\u0647 \u0633\u0627\u06cc\u0631 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0631\u0627 \u0628\u0627 \u0645\u0634\u06a9\u0644 \u0645\u0648\u0627\u062c\u0647 \u0645\u06cc \u06a9\u0646\u062f. \u0644\u0630\u0627 \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u0645\u062f\u06cc\u0631\u0627\u0646 \u0634\u0628\u06a9\u0647 \u0647\u0627\u06cc \u0633\u0639\u06cc \u062f\u0627\u0631\u0646\u062f \u062a\u0627 \u0628\u0646\u062d\u0648\u06cc \u067e\u0647\u0646\u0627\u06cc \u0628\u0627\u0646\u062f \u062f\u0627\u0646\u0644\u0648\u062f \u0631\u0627 \u0645\u062d\u062f\u0648\u062f \u0648 \u06cc\u0627 \u0622\u0646\u0631\u0627 \u062a\u0645\u0627\u0645\u0627 \u062d\u0630\u0641 \u06a9\u0646\u0646\u062f. <\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/p>\n

\u062f\u0631 IOS \u0633\u06cc\u0633\u06a9\u0648 \u0647\u0645 \u0631\u0627\u0647 \u06a9\u0627\u0631 \u0647\u0627\u06cc\u06cc \u062a\u0639\u0628\u06cc\u0647 \u0634\u062f\u0647 \u06a9\u0647 \u0628\u062a\u0648\u0627\u0646 \u062f\u0631 \u0634\u0628\u06a9\u0647 \u0647\u0627\u06cc LAN \u067e\u0647\u0646\u0627\u06cc \u0628\u0627\u0646\u062f \u062f\u0627\u0646\u0644\u0648\u062f \u0631\u0627 \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0647 \u0648 \u06cc\u0627 \u06a9\u0644\u0627 \u0622\u0646\u0631\u0627 \u062d\u0630\u0641 \u0646\u0645\u0648\u062f. \u0642\u0627\u0628\u0644\u06cc\u062a Protocol Inspection \u062f\u0631 IOS \u062a\u0648\u0633\u0637 \u0642\u0627\u0628\u0644\u06cc\u062a\u06cc \u0628\u0647 \u0646\u0627\u0645 NBAR \u0635\u0648\u0631\u062a \u0645\u06cc \u06af\u06cc\u0631\u062f \u06a9\u0647 \u0647\u0645\u0627\u0646\u0637\u0648\u0631 \u06a9\u0647 \u0627\u0632 \u0646\u0627\u0645 \u0622\u0646 \u0628\u0631 \u0645\u0634\u062e\u0635 \u0648\u0638\u06cc\u0641\u0647 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u067e\u0631\u0648\u062a\u06a9\u0644 \u0647\u0627 \u062f\u0631 \u0644\u0627\u06cc\u0647 Application \u0631\u0627 \u0628\u0631 \u0639\u0647\u062f\u0647 \u062f\u0627\u0631\u062f. \u067e\u0633 \u0642\u0637\u0639\u0627 \u0628\u062e\u0634\u06cc \u0627\u0632 \u062a\u0646\u0637\u06cc\u0645\u0627\u062a “download Restriction” \u0628\u062a\u0648\u0633\u0637 NBAR \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc \u0634\u0648\u062f. \u067e\u0633 \u062a\u0646\u0647\u0627 \u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u06a9\u0647 \u062a\u0631\u0627\u0641\u06cc\u06a9 HTTP \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f\u0647 \u0648 URL \u0647\u0627\u06cc\u06cc \u06a9\u0647 \u062f\u0631 \u06a9\u0647 \u062f\u0631 \u0622\u0646\u0647\u0627 \u0644\u063a\u0627\u062a \u0641\u0627\u0628\u0644 \u0647\u0627\u06cc\u06cc \u0642\u0627\u0628\u0644 download \u0645\u062b\u0644 exe \u060cmsi \u060c cab\u060c bin\u060crar \u060c zip \u060c tar \u060c 3gp\u060c swf \u060c flv \u060c avi \u060c mpg \u0648… \u0631\u0627 drop \u06a9\u0631\u062f.<\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/p>\n

\u062f\u0631 \u0632\u06cc\u0631 \u06cc\u06a9 \u0646\u0645\u0648\u0646\u0647 configuration \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u062a\u0648\u0636\u06cc\u062d\u0627\u062a \u0628\u0627\u0644\u0627 \u0646\u0648\u0634\u062a\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a :<\/span><\/span><\/span><\/p>\n

\n

RTR(config)#class-map match-any  DOWNLOAD<\/span><\/p>\n

RTR(config-cmap)# match protocol http url “*.zip”<\/span><\/span><\/span><\/p>\n

RTR(config-cmap)# match protocol http url “*.rar”<\/span><\/span><\/span><\/p>\n

RTR(config-cmap)# match protocol http url “*.exe”<\/span><\/span><\/span><\/p>\n

RTR(config-cmap)# match protocol http url “*.msi”<\/span><\/span><\/span><\/p>\n

RTR(config)#policy-map DOWNLOAD-RESTRICTION<\/span><\/p>\n

RTR(config-pmap)#class DOWNLOAD<\/span><\/p>\n

RTR(config-pmap-c)# drop<\/span><\/span><\/span><\/p>\n

RTR(config)#int fastEthernet 0\/0<\/span><\/p>\n

RTR(config-if)#service-policy output DOWNLOAD-RESTRICTION<\/span><\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"

\u062f\u0631 \u0645\u0628\u0627\u062d\u062b \u0627\u0645\u0646\u06cc\u062a \u0634\u0628\u06a9\u0647 \u0645\u0628\u062d\u062b Web Filtering \u06cc\u06a9\u06cc \u0627\u0632 \u0645\u0642\u0648\u0644\u0647 \u0647\u0627\u06cc \u0628\u0633\u06cc\u0627\u0631 \u0645\u0647\u0645\u06cc \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 Internet sharing \u0628\u0633\u06cc\u0627\u0631 \u0628\u0647 \u0622\u0646 \u062a\u0648\u062c\u0647 \u0645\u06cc \u0634\u0648\u062f \u0648 \u0627\u06a9\u062b\u0631 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[220,221,229],"tags":[239,249,259,264,268,90],"class_list":["post-8138","post","type-post","status-publish","format-standard","hentry","category-application-and-software-security","category-cisco-and-networking","category-network-and-protocol-security","tag-backup-and-recovery","tag-firewall","tag-network-security","tag-persian","tag-routing","tag-cisco"],"_links":{"self":[{"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/posts\/8138","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/comments?post=8138"}],"version-history":[{"count":0,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/posts\/8138\/revisions"}],"wp:attachment":[{"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/media?parent=8138"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/categories?post=8138"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/tags?post=8138"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}