You are dead right, Kings as usual ;) I do run on of the latest releases of 12.4 code. Sometimes it is very frustrating to understand that I never know everything for the lab exam. It’s just impossible to retain everything.
Eugene From: Kingsley Charles [mailto:[email protected]] Sent: Wednesday, November 10, 2010 9:29 PM To: Eugene Pefti Subject: Re: [OSL | CCIE_Security] parameter-map type urlfilter The “parameter-map type urlfilter" can be found in 12.15(T) after which the ZFW options has changed a bit with the support of Trend Based URL filter servers. The CCIE lab is based on 12.4(15)T. I guess, you are using 12.4(20) or above. With regards Kings On Thu, Nov 11, 2010 at 5:25 AM, Eugene Pefti <[email protected]> wrote: And I don’t know if the “parameter-map type urlfilter NAME” is the right command. I tried it against two images, advsecurity and adventerprise and none of them allows “urlfilter” after the type of parameter map. Acceptable options are urlfpolicy and urlf-glob which are essentially good and quite usable for local URL filtering applications. I configured a bunch of the clients routers with ZBF using parameter maps to do local URL filtering for a number of social networking sites Eugene From: [email protected] [mailto:[email protected]] On Behalf Of Mark Senteza Sent: Tuesday, November 09, 2010 7:59 PM To: [email protected] Subject: [OSL | CCIE_Security] parameter-map type urlfilter Hey all, I'd like some clarification on the "exclusive-domain" command under the parameter-map type urlfilter command. My understanding is that the exclusive-domain list is a list of domains that are excluded from lookup requests being sent to the URL filter server for. I hope thus far I am correct. My confusion is with the "deny" or "permit" statement. Does the deny statement mean dont bother sending a request to the URL filter server and just deny all traffic sent to the specified domain ? And does the "permit" mean dont bother sending a request to the URL filter server and proceed to permit all traffic sent to the specified domain? Unfortunately, I dont have a Websense server to test this, so I was hoping somebody could enlighten me on this. If the configuration below was used, for example, what would it do: parameter-map type urlfilter URLFILTER-PARAMAP server-vendor websense 192.168.90.90 exclusive-domain deny example.com Thanks again Mark _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
