Cisco FirePOWER ASA 5500 series User Manual

20-9
Cisco Security Appliance Command Line Configuration Guide
OL-10088-01
Chapter 20 Applying Filtering Services
Viewing Filtering Statistics and Configuration
To enable FTP filtering, enter the following command:
hostname(config)# filter ftp port[-port] localIP local_mask foreign_IP foreign_mask
[allow] [interact-block]
Replace port[-port] with a range of port numbers if a different port than the default port for FTP (21) is
used.
Replace local_ip and local_mask with the IP address and subnet mask of a user or subnetwork making
requests.
Replace foreign_ip and foreign_mask with the IP address and subnet mask of a server or subnetwork
responding to requests.
The allow option causes the security appliance to forward HTTPS traffic without filtering when the
primary filtering server is unavailable.
Use the interact-block option to prevent interactive FTP sessions that do not provide the entire directory
path. An interactive FTP client allows the user to change directories without typing the entire path. For
example, the user might enter cd ./files instead of cd /public/files.
Viewing Filtering Statistics and Configuration
This section describes how to monitor filtering statistics. This section includes the following topics:
• Viewing Filtering Server Statistics, page 20-9
• Viewing Buffer Configuration and Statistics, page 20-10
• Viewing Caching Statistics, page 20-11
• Viewing Filtering Performance Statistics, page 20-11
• Viewing Filtering Configuration, page 20-11
Viewing Filtering Server Statistics
To show information about the filtering server, enter the following command:
hostname# show running-config url-server
The following is sample output from the show running-config url-server command:
hostname# show running-config url-server
url-server (outside) vendor n2h2 host 128.107.254.202 port 4005 timeout 5 protocol TCP
To show information about the filtering server or to show statistics, enter the following command:
The following is sample output from the show running-config url-server statistics command, which
shows filtering statistics:
hostname# show running-config url-server statistics
Global Statistics:
--------------------
URLs total/allowed/denied 13/3/10
URLs allowed by cache/server 0/3
URLs denied by cache/server 0/10
HTTPSs total/allowed/denied 138/137/1
HTTPSs allowed by cache/server 0/137
HTTPSs denied by cache/server 0/1

Cisco FirePOWER ASA 5500 series Specifications

General

Brand	Cisco
Model	FirePOWER ASA 5500 series
Category	Firewall
Language	English