You can create Application ACLs to control access to specific URLs. This window displays the Application ACLs created for the selected context, and enables you to edit existing ACLs and create new ones.
To create an Application ACL, click Add and create the Application ACL in the displayed dialog.
Edit
To edit an Application ACL, choose the ACL and click Edit. Edit the ACL in the displayed dialog.
Delete
To delete an ACL choose the ACL and click Delete.
ACL Name
This table lists the names of the ACLs created for this context.
Details of ACL
Action
One of the following:
•Permit—Access to the URL in this entry is allowed.
•Deny—Access to the URL in this entry is denied.
URL
The URL to which the ACL controls access.
Action URL Time Range
The range or periods of time that this ACL is in effect.
Add or Edit Application ACL
Create or edit an application ACL in this window. Cisco IOS SSL VPN uses application ACLs to specify permitted and denied URLs. One ACL can consist of multiple entries.
•Deny—Deny access to the URL in this entry is denied.
URL
Any
To have this ACL entry apply to any URL, click Any.
Specific URL
To have this ACL entry apply to a URL that you specify, click SpecificURL. Then, enter the URL in the field. Be sure to enter the entire URL. The following are examples of valid URLs:
http://www.cisco.com
https://www.foo.com
ftp://ftp.bad-down-loads.com
Action URL Time Range
The action URL time range can specify the start and end date for the action specified, as well as the time periods that the action is to be in effect.To place a time range entry in this field, click the button to the right of the field and choose one of the following:
•Add Time Range List—Choose this option to create a new time range entry.
•Select Time Range List—Choose this option to select an existing time range entry.
•Remove Time Range List—Choose this option to remove the current time range entry.
Action URL Time Range
Add time range lists in this window. Time range lists specify when permit or deny actions are to be applied.
To create a time range entry, click Add, and create the entry in the displayed dialog.
Edit
To edit an entry, select the entry, and click Edit. Make changes to the entry in the displayed dialog.
Delete
To remove an entry, select the entry and click Delete.
Item Name
The Item Name list displays the time range entries configured for this context.
Details of Action URL Time Range
The Details area displays additional information about the selected time range entry.
Type
One of the following:
•Absolute—The time range specifies an absolute date. There can be a start date, and there can be an end date, or both.
•Periodic—The time range specifies days of the week, so that you can include some days and not others. It can also specify a start time and an end time.
Period
If the entry type is Periodic, this column shows which days are included. The following examples show possible entries:
daily
weekdays
Sun, Tue, Sat
Start Time
The starting time and date is displayed for absolute entries, for example, 10:00 11 Nov 2007.
The starting time is displayed for periodic entries, for example 8:00.
End Time
The end time and date is displayed for absolute entries, for example, 10:00 11 Dec 2007.
The end time is displayed for periodic entries, for example 23:00.
Add or Edit Action URL Time Range Dialog
Create or edit a time range entry in this dialog. A time range entry can consist of multiple subentries.
•Absolute—The time range specifies an absolute date. There can be a start date, and there can be an end date, or both.
•Periodic—The time range specifies days of the week, so that you can include some days and not others. It can also specify a start time and an end time.
Period
If the entry type is Periodic, this column shows which days are included. The following examples show possible entries:
daily
weekdays
Sun, Tue, Sat
Start
The starting time and date is displayed for absolute entries, for example, 10:00 11 Nov 2007.
The starting time is displayed for periodic entries, for example 8:00.
End
The end time and date is displayed for absolute entries, for example, 10:00 11 Dec 2007.
The end time is displayed for periodic entries, for example 23:00.
Add
To add an entry, click Add, and choose Absolute, or Periodic. If an absolute entry has been added, the Absolute option is disabled.
Edit
To edit a time range entry, select the entry and click Edit.
Delete
To remove a time range entry, select the entry and click Delete.
Add or Edit Absolute Time Range Entry
Create or edit an absolute time range entry in this window. The time range can have a start date, and end date, or both.
•Specific weekdays—To select specific days, choose this option, and then check the boxes next to the days of the week that you want to include.
•weekdays—To include only Monday, Tuesday, Wednesday, Thursday, and Friday, choose this option.
•weekend—To include only Saturday, and Sunday, choose this option.
•daily—To include each day of the week, choose this option.
From Day
This option is available when you choose Specificweekdays. Check the box next to one day of the week to specify the From day.
Till Day
This option is available when you choose Specificweekdays, and you have specified one From day. Click the button and choose the Till day from the list. If more than one From day is checked, this option is disabled.
Duration
Start Time
Enter the starting time in 24-hour format. For example, entering 13:00 specifies a starting time of 1:00 p.m.
End Time
Enter the ending time in 24-hour format. For example, entering 23:59 specifies an ending time of 11:59 p.m.
Feedback
SSL VPN Context: Access Control Lists