topic Re: Block domainlist by regex in Network Security

Block domainlist by regex

ramatoulaye.hane1 — Fri, 21 Feb 2020 16:21:53 GMT

Dear All,

I am using URL filter by regex on my ASA 5525 version 9.2(2)4 but it's not working. The domains are not blocked. Please find in attachment the config I used

Re: Block domainlist by regex

ramatoulaye.hane1 — Wed, 17 Oct 2018 12:14:55 GMT

Dears Support,

Thank in advance for your support.

Re: Block domainlist by regex

mikael.lahtela — Wed, 17 Oct 2018 19:35:18 GMT

Hi,

I think the problem is that url is TLS encrypted so I don't think you can block it.
Try with a domain that works with HTTP traffic to see if you have done it correctly.

br, Micke

Re: Block domainlist by regex

ramatoulaye.hane1 — Thu, 18 Oct 2018 09:20:15 GMT

Hi Michael,

Thank for your feedback. I try with another domain http but still the same. Below the config. The traffic is from inside to outside.

regex speedtest "\.speedtest\.net"
class-map type regex match-any DomainBlockList
match regex speedtest
class-map type inspect http match-all BlockDomainsClass
match request header host regex class DomainBlockList
policy-map type inspect http http_inspection_policy
parameters
protocol-violation action drop-connection
class BlockDomainsClass
reset log

access-list 103 extended permit ip any4 any4

class-map httptraffic
match access-list 103

policy-map inside-policy
class httptraffic
inspect http http_inspection_policy

service-policy inside-policy interface inside