Filtering ActiveX Objects
Java has a added or beneath able-bodied aegis archetypal for its alive cipher (there has been
only one big aegis affair with it, and that was due to the poor implementation
of this archetypal in some versions of Netscape), but ActiveX altar accept almost
unrestricted admission to the client’s machine.
www.syngress.com
Advanced PIX Configurations • Chapter 4 175
The command to configure clarification of ActiveX cipher (and all alive content
that is anchored in “object” tags) is actual agnate to Java filtering:
filter activex
Here is an example:
PIX1(config)# clarify activex 80 0 0 0 0
This command configures the PIX to animadversion out all pairs of “object” tags
from all admission Web pages, disabling ActiveX and some Java applets.