Listen, Kings, I want to clarify one more thing for me again. I just came across this software requirements for CCIE Security lab. It says: Cisco Router IOS Version 12.4(15)T or above(Advanced Enterprise Services K9 image).
So, how far above the IOS image can be? I'm still complying with the software requirements running 12.4(20)T. Eugene From: Eugene Pefti [mailto:[email protected]] Sent: Wednesday, November 10, 2010 10:17 PM To: 'Kingsley Charles' Cc: [email protected] Subject: RE: [OSL | CCIE_Security] parameter-map type urlfilter You are dead right, Kings as usual ;) I do run on of the latest releases of 12.4 code. Sometimes it is very frustrating to understand that I never know everything for the lab exam. It's just impossible to retain everything. Eugene From: Kingsley Charles [mailto:[email protected]] Sent: Wednesday, November 10, 2010 9:29 PM To: Eugene Pefti Subject: Re: [OSL | CCIE_Security] parameter-map type urlfilter The "parameter-map type urlfilter" can be found in 12.15(T) after which the ZFW options has changed a bit with the support of Trend Based URL filter servers. The CCIE lab is based on 12.4(15)T. I guess, you are using 12.4(20) or above. With regards Kings On Thu, Nov 11, 2010 at 5:25 AM, Eugene Pefti <[email protected]> wrote: And I don't know if the "parameter-map type urlfilter NAME" is the right command. I tried it against two images, advsecurity and adventerprise and none of them allows "urlfilter" after the type of parameter map. Acceptable options are urlfpolicy and urlf-glob which are essentially good and quite usable for local URL filtering applications. I configured a bunch of the clients routers with ZBF using parameter maps to do local URL filtering for a number of social networking sites Eugene From: [email protected] [mailto:[email protected]] On Behalf Of Mark Senteza Sent: Tuesday, November 09, 2010 7:59 PM To: [email protected] Subject: [OSL | CCIE_Security] parameter-map type urlfilter Hey all, I'd like some clarification on the "exclusive-domain" command under the parameter-map type urlfilter command. My understanding is that the exclusive-domain list is a list of domains that are excluded from lookup requests being sent to the URL filter server for. I hope thus far I am correct. My confusion is with the "deny" or "permit" statement. Does the deny statement mean dont bother sending a request to the URL filter server and just deny all traffic sent to the specified domain ? And does the "permit" mean dont bother sending a request to the URL filter server and proceed to permit all traffic sent to the specified domain? Unfortunately, I dont have a Websense server to test this, so I was hoping somebody could enlighten me on this. If the configuration below was used, for example, what would it do: parameter-map type urlfilter URLFILTER-PARAMAP server-vendor websense 192.168.90.90 exclusive-domain deny example.com Thanks again Mark _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
