Filtering ActiveX Objects
The filter activex command filters out ActiveX objects and other HTML usages
from inbound packets. These controls include custom forms, calendars, and extensive thirdparty
forms for gathering or displaying information. The syntax for filtering ActiveX objects
is as follows:
filter activex port local-ip local-mask foreign-ip foreign-mask
Note that if the HTML tags split across network packets or if
the code in the tags is longer than the number of bytes in the maximum transmission unit
(MTU), Cisco Security Appliance cannot block the tag.