topic Re: PBR on ASA / FTD in Network Security

PBR on ASA / FTD

BmfL — Thu, 15 Oct 2020 15:03:03 GMT

Hi Folks,

I was researching and I could not find documentation referring to PBR on ASA or FTD but in specific case:

Using PBR where the LAN users will be forward to ISP2 if trying to reach a particular site, for example google. And considering that there are multiple IPs involved on the destination I would like to use url www.goole.com as opposed to IPs and facebook.com. All other traffic would go trough ISP1.

I know from a router this is possible but not sure from ASA or FTD, any toughs ?

Many thanks in advance

Re: PBR on ASA / FTD

balaji.bandi — Thu, 15 Oct 2020 15:08:16 GMT

ASA PBR

https://weberblog.net/policy-based-routing-on-a-cisco-asa/

FTD

https://www.youtube.com/watch?v=lakHhw9CR5Y

Re: PBR on ASA / FTD

BmfL — Thu, 15 Oct 2020 15:18:34 GMT

Thank you. However, I cant see how I could point www.facebook and www.google.com to ISP2 and other traffic to ISP1. The goal is to make this differentiation as opposed to send all www / https traffic to one side only.

Re: PBR on ASA / FTD

Rob Ingram — Thu, 15 Oct 2020 15:21:52 GMT

Hi @BmfL

I don't think is possible with ASA/FTD to send specific traffic to a URL/FQDN, I think you'd need an SD-WAN solution to achieve this.

HTH

Re: PBR on ASA / FTD

BmfL — Thu, 15 Oct 2020 15:34:30 GMT

Hi Rob, that's what I tough but wasn't sure, too bad...

I guess in addition to what you have stated it is possible to do it on the traditional router without SD-WAN.

Thank you for your thoughts

Re: PBR on ASA / FTD

balaji.bandi — Thu, 15 Oct 2020 15:47:31 GMT

I may have misunderstood the requirement, yes we do see some limitations - if IP yes, looking FQDN may not i guess.