topic Re: Block URLs using ASDM in Network Security

Block URLs using ASDM

wynneitmgr — Tue, 15 Jun 2021 12:01:53 GMT

I would like to use ASDM to block my users from accessing certain websites. I am using ASDM 7.9 on ASA 5508. For instance, a url like Facebook, has multiple IP addresses. Any suggestions? Thank you.

Re: Block URLs using ASDM

Rob Ingram — Tue, 15 Jun 2021 12:05:22 GMT

Hi @wynneitmgr

You could try using FQDNs in the access-list, example:-

https://community.cisco.com/t5/security-documents/using-hostnames-dns-in-access-lists-configuration-steps-caveats/ta-p/3123480

....but a proper web proxy would be a better solution than doing this on the ASA.

Re: Block URLs using ASDM

balaji.bandi — Tue, 15 Jun 2021 12:05:32 GMT

check the information help you : ( what model of ASA , do you have IPS module ?)

https://community.cisco.com/t5/security-documents/asa-url-filtering-via-asdm/ta-p/3120314

Re: Block URLs using ASDM

wynneitmgr — Tue, 15 Jun 2021 12:11:06 GMT

@Rob Ingram

So setting up a web proxy is a better way to block websites? I will try that.

Re: Block URLs using ASDM

wynneitmgr — Tue, 15 Jun 2021 12:11:31 GMT

@balaji.bandi

I have an ASA 5508 with ASDM 7.9

Re: Block URLs using ASDM

Rob Ingram — Tue, 15 Jun 2021 12:17:19 GMT

@wynneitmgr Yes, much more features than an ASA. Alternatively if you were running FTD software (instead of ASA) with the URL filtering license, you'd be able to better filter traffic based on the URL, but less features than a dedicated web proxy.

Re: Block URLs using ASDM

wynneitmgr — Tue, 15 Jun 2021 12:18:39 GMT

@Rob Ingram

So are you suggesting something different then just editing the Hosts file with URLs that I want to block?

Re: Block URLs using ASDM

Rob Ingram — Tue, 15 Jun 2021 12:32:02 GMT

I was never suggesting editing host files to block the URLs.

If you just want to block facebook, you can use any of the options suggested....however a web proxy is probably a better solution, imo.

Re: Block URLs using ASDM

wynneitmgr — Tue, 15 Jun 2021 12:39:39 GMT

@Rob Ingram

Thanks for the clarification. I guess I am not familiar with setting up a web proxy. I will have to do some research on how to do that. Do you know if there is any good documentation online that I can read? Thanks!!

Re: Block URLs using ASDM

Rob Ingram — Tue, 15 Jun 2021 12:56:03 GMT

@wynneitmgr

There would be cost involved in the proxies I was thinking of, such as Cisco WSA or Cisco Umbrella SWG.

Re: Block URLs using ASDM

balaji.bandi — Wed, 16 Jun 2021 09:36:49 GMT

as per the thread this was resolved i guess it was marked as solution, or any further assistance required here.