IS200DAMCG1A机器人模块卡件
请参阅“对象定义”>“调度”>“配置”选项卡。默认情况下未选中规则单击“启用”框激活此规则,然后保存设置。保存单击保存保存设置撤消单击撤消取消设置后退单击后退按钮后,屏幕将返回数据包过滤器配置页面。EW200工业蜂窝网关261 5.2.2 URL阻止“URL阻止”功能允许您定义传入和传出web请求数据包的阻止或允许规则。通过定义的规则,网关可以控制包含完整URL、部分域名或预定义关键字的Web请求。例如,可以根据域输入后缀(如.com或.org)或关键字(如“bct”或“mpe”)过滤或仅允许Web请求。URL阻止规则应指定URL、部分域名或来自网关和目标服务端口的web请求中包含的关键字。可以应用时间安排在预定义的时间间隔内激活URL阻止规则。网关将记录并显示与黑名单或白名单排除中定义的URL阻止规则匹配的不允许的web访问请求。当您为“URL阻止规则列表”选择“允许除符合以下规则的规则外的所有规则通过”时,您正在将定义的URL阻止规则设置为属于黑名单。如果请求中的一个模式与一个规则匹配,则规则列表中列出的数据包将被阻止。其他Web请求可以通过网关。相反,当您为“URL阻止规则列表”选择“拒绝除符合以下规则外的所有内容”时,您将定义的数据包过滤规则设置为属于白名单。如果请求中的一个模式与一个规则匹配,则允许规则中列出的Web请求。其他Web请求将被阻止。带有黑名单的URL阻止规则当网关管理员想要阻止具有特定模式的web请求时,他/她可以使用“URL阻止”功能通过定义黑名单来阻止特定的web请求,如图所示。当管理员希望仅允许具有某些专用模式的web请求通过网关时,他/她还可以通过定义白名单来使用“URL阻止”功能以满足要求。如图所示,启用URL阻止功能,并创建第一个规则以拒绝具有“sex”或“sexygirl”模式的Web请求,另一个规则以通过网关的“花花公子”模式拒绝Web请求。系统将用“性”、“性生活”或“花花公子”模式阻止网络请求通过网关。EW200工业蜂窝网关262 URL阻止设置转到安全>防火墙>URL阻止选项卡。在“URL阻止”页面中,有三个配置窗口。它们是“配置”、“URL阻止规则列表”和“URL阻止策略配置”。“配置”窗口允许您激活URL阻止功能,并指定“URL阻止原则列表”中定义的黑名单或白名单数据包
Refer to Object Definition > Scheduling > Configuration tab. Rule Unchecked by default Click Enable box to activate this rule, then save the settings. Save Click Save to save the settings Undo Click Undo to cancel the settings Back When the Back button is clicked the screen will return to the Packet Filter Configuration page. EW200 Industrial Cellular Gateway 261 5.2.2 URL Blocking The "URL Blocking" function lets you define blocking or allowing rules for incoming and outgoing web request packets. With defined rules, the gateway can control the Web requests containing the complete URL, partial domain name, or pre-defined keywords. For example, one can filter out or allow only the Web requests based on domain input suffixes like .com or .org or keywords like “bct” or “mpe”. An URL blocking rule should specify the URL, partial domain name, or included keywords in the web requests from and to the gateway and also the destination service port. A time schedule can be applied to activate the URL Blocking rules during pre-defined time interval(s). The gateway will log and display the disallowed web accessing requests that matched the defined URL blocking rule in the black-list or in the exclusion of the white-list. When you choose "Allow all to pass except those match the following rules" for the "URL Blocking Rule List", you are setting the defined URL blocking rules to belong to the blacklist. The packets, listed in the rule list, will be blocked if one pattern in the requests matches to one rule. Other Web requests can pass through the gateway. In contrast, when you choose "Deny all to pass except those match the following rules" for the "URL Blocking Rule List", you are setting the defined packet filtering rules to belong to the white list. The Web requests, listed in the rule, will be allowed if one pattern in the requests matches to one rule. Other Web requests will be blocked. URL Blocking Rule with Blacklist When the administrator of the gateway wants to block web requests with specific patterns, he/she can use the "URL Blocking" function to block specific web requests by defining the blacklist as shown in the diagram. When the administrator wants to allow only web requests with some dedicated patterns to go through the gateway, he/she can also use the "URL Blocking" function by defining the white list to meet the requirement. As shown in the diagram, enable the URL blocking function and create the first rule to deny the Web requests with "sex" or "sexygirl" patterns and the other to deny web requests with "playboy" pattern to go through the gateway. The system will block the web requests with "sex", "sexygirl" or "playboy" patterns to pass through the gateway. EW200 Industrial Cellular Gateway 262 URL Blocking Setting Go to Security > Firewall > URL Blocking Tab. In the "URL Blocking" page, there are three configuration windows. They are "Configuration", "URL Blocking Rule List", and "URL Blocking Rule Configuration." The "Configuration" window lets you activate the URL blocking function and specify blacklisting or whitelisting packets as defined in the "URL Blocking Rule List"