[j-nsp] Checking URL thru filter/policy on M-series router interface

Stefan Fouant sfouant at gmail.com
Mon Oct 5 02:33:54 EDT 2009


On Mon, Oct 5, 2009 at 2:20 AM, S.Hasan Asghar Naqvi <hasan.asghar at gmail.com
> wrote:

> Hi
>
> I would like to know if there is a possibility on M-series router to check
> from the traffic on an interface, any particular URL from the HTTP traffic
> passing through this interface.
>
> Like in Cisco we can match URL as
>
> Router(config-cmap)#*match protocol http url "mydomain.com"*
>

M-Series firewall-filter match conditions can only inspect up to Layer 4, so
there is no ability for it to do DPI on a packet at Layer 7.  For that type
of application you might want to look into SSG or SRX platforms.

-- 
Stefan Fouant


More information about the juniper-nsp mailing list