https://community.cisco.com/t5/network-security/block-some-https-sites-on-asa-5508/m-p/2901194#M154971 <P>Hello, everybody!</P> <P>Could it possible to filter some https sites on ASA 5508 without IPS subscription? I mean youtube.com, facebook.com, some local social nets...</P> <P></P> <P>Please, give a link to a useful manual.</P> <P></P> <P>Many thanks in advance,</P> <P></P> <P>Ilya</P> Tue, 12 Mar 2019 07:36:08 GMT Ilya Semenov 2019-03-12T07:36:08Z https://community.cisco.com/t5/network-security/block-some-https-sites-on-asa-5508/m-p/2901194#M154971 <P>Hello, everybody!</P> <P>Could it possible to filter some https sites on ASA 5508 without IPS subscription? I mean youtube.com, facebook.com, some local social nets...</P> <P></P> <P>Please, give a link to a useful manual.</P> <P></P> <P>Many thanks in advance,</P> <P></P> <P>Ilya</P> Tue, 12 Mar 2019 07:36:08 GMT https://community.cisco.com/t5/network-security/block-some-https-sites-on-asa-5508/m-p/2901194#M154971 Ilya Semenov 2019-03-12T07:36:08Z https://community.cisco.com/t5/network-security/block-some-https-sites-on-asa-5508/m-p/2901195#M154972 <P>Hello Ilya-</P> <P>I don't believe this is possible with the ASA by itself. You can use the MPF (Modular Policy Framework) to block HTTP based URLs:</P> <P><A href="http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/100535-asa-8x-regex-config.html">http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/100535-asa-8x-regex-config.html</A></P> <P>However, this does not work for HTTPs. For that you will need to utilize the SSL inspection which is a FirePOWER feature. For that you can just get the URL Filtering Subscription (Without IPS, AMP.)</P> <P><EM>Thank you for rating helpful posts!</EM></P> Sat, 09 Apr 2016 15:01:48 GMT https://community.cisco.com/t5/network-security/block-some-https-sites-on-asa-5508/m-p/2901195#M154972 nspasov 2016-04-09T15:01:48Z