Web Content

Web Content(Concept & Securing Network)网页内容（内容与网络安全）Transparent Firewall (Understanding Concept)通透式防火墙（概念理解）Network Attack Prevention (Design and Managing)预防网络攻击（设计与管理）SSM Cards(Concept)SSM(System Safety Monitor)卡（概念）Controlling Traffic & Cisco ASA Advanced Features(Refer Chapter 7, 21, 24, 25)流量监控与思科自适应安全设备的优势（详见第7、21、24、25章）What is Web Content Filtering?什么是网页内容过滤？Content filtering is the technique whereby content is blocked or allowed based onanalysis of its content, rather than its source or other criteria.内容过滤技术即通过对内容的分析，从而阻止或允许该内容的传输，它并不分析内容来源或者其他方面Content filtering is the most commonly used group of methods to filterspam.内容过滤技术是过滤垃圾邮件的主要途径。

(Importance)?为什么要使用网页内容过滤（重要性）？Due to Number of increased Attacks on Web Server effects Users/Organizations Users Computers too. So, to protect their Database or related stuff. You need to Deploy "Web Content Filtering" for better Security measure.Java and ActiveX Filtering►Java与主动式X过滤器Web Content Filtering►网页内容过滤器Web Caching►网络缓存网页服务器受到的攻击与日俱增，这影响了广大用户和公司的电脑正常运行。

因此，为保护他们的数据库和其他资料，“网页内容过滤器”应运而生。

Explanation释义Java and ActiveX Filtering:Most Web Sites use Java applets and ActiveX scripts to add functionality to their Web services.Java 与主动式X过滤:大多数网站使用Java程序和主动式X脚本，为其网络服务添加新的功能。

Problem:Hackers Attack (Script and Application Building Attack)问题：黑客攻击（脚本与应用构建攻击）Solution:Applying/Enable Filters on ASA Firewall. (Practical DEMO)方案：应用/激活ASA防火墙过滤器。

（实验演示）Web Content Filtering:Also known as Internet content filtering is a process wherein online materials are either allowed to pass or blocked altogether based on the examination of its actual content instead of its source or other related filtering criteria.网页内容过滤：它也被称之为因特网内容过滤。

网页内容过滤审查的是网页的实际内容，而非该内容的来源或者其他方面。

在过滤完成之后，允许或者禁止各个内容。

Problem:Hackers Attack (Flash Scripts and Web Services/Protocols)问题：黑客攻击（闪存脚本与网页服务/协议）Controlling Traffic -Web Content流量监控-网页内容问题：黑客攻击（闪存脚本与网页服务/协议）Solution:Applying/Enable Filters on ASA Firewall. (Practical DEMO)方案：应用/激活ASA防火墙过滤器。

（实验演示)A web cache is a mechanism for the temporary storage (caching) ofweb documents, such as HTML pages and images, to reduce bandwidth usage, server load.网络缓存：网页缓存是一种用于暂时存储（缓存）网页文件，例如HTML页面和图像，的机制。

它减少了对带宽的需求与服务的负载。

Hacker Attack (Send Infected cache and Destroy Data Process)黑客攻击（发送受病毒感染的缓存，破坏数据进程）Solution:Applying/Enable Filters on ASA Firewall. (Practical DEMO)方案：应用/激活ASA防火墙过滤器。

（实验演示）What is Transparent Firewall?什么是通透式防火墙？A transparent firewall, on the other hand, is a Layer 2 firewall that acts like a "bump in the wire"or a "stealth firewall"andis not seen as a router hop to connected devices.通透式防火墙，换言之，它是一种链路层防火墙。

与路由器使用驿站去连接设备的方式不同，通透式防火墙更像是一种“嵌入式电缆”或者“隐形防火墙”。

Routed Mode(Layer 3)vs Transparent Mode (Layer 2)路由模式（3层）与透明模式（2层）In, some types of traffic cannot pass through the security appliance even if you allow it in an access list. Alternatively, the Transparent mode firewall can allow any traffic through with either an extended access list (for IP traffic) or an Ether-Type access list (for non-IP traffic).在路由模式中，尽管你在访问列表中对其表示允许，但是有时候某些流量还是无法通过安全设备。

因此，通透式防火墙就成了我们的新选择。

它可以使任何访问列表（IP流量）或者以太访问列表（非IP流量）中的任何流量通过安全审查。

Cisco ASA Advanced Feature -Transparent Firewall思科自适应安全设备的优势-通透式防火墙What is Network Attack Prevention System?什么是网络攻击防御系统？Preventing Network Attacks is a process in which Firewall enables "Threat Detection"System through which you can make Secure Network.通过运行“威胁检测”系统，防火墙实现了其防御网络攻击的功能，增强了网络安全。

Cisco ASA Advanced Feature -Network AttackPrevention思科ASA 的优点-网络攻击防御What is SSM Cards?(An Expensive Solution)什么是SSM 卡？（价格不菲）The Cisco AIP SSM and AIP SSC are part of the Cisco ASA 5500 Series Adaptive Security Appliance solution, which provides superior firewalland VPN capabilities in a single, easy-to-deploy platform. With the advanced inspection capabilities of the Cisco AIP SSM or Cisco AIP SSC,this appliance provides integrated, converged protection of your servers and infrastructure without compromising your ability to use the network as a business tool.•Cisco AIP SSM 和AIP SSC 防火墙从属于思科ASA5500系列自适应安全设备方案中两类。

自适应安全设备是一种单一的、易于配置的防火墙，同时它还带有VPN 的性能。

正是因为Cisco AIP SSM 和AIP SSC 的高级检测功能，该设备为我们的服务器和基础设备提供了完备的安全保障。

同时，我们在使用网络的时候也就省去了不少麻烦。

•Cisco ASA Advanced Feature -SSM Cards思科ASA 的优点-SSM 卡Configuring Web Content Filtering(Securing Private Networks)配置网页内容过滤（保护私有网络）Designing & ManagingTransparent Firewall设计与管理通透式防火墙ConfiguringNetwork Attack Prevention System配置网络攻击防御系统ConfigureAIP-SSM Cards配置AIP-SSM CardsConfiguring Cisco ASA 配置思科ASA。