topic Hello , in Network Security

ASA5555X with SF module - Can I block just a specific URL path ?

dclee — Tue, 12 Mar 2019 07:45:50 GMT

We currenlty run our ASA 5555X with the SF module installed. To date we have had no issues with it.

I have a requirement to block a specific inbound URL path to our ACE proxies.

For example

https://www.test.com/api/important

I would like to filter via the SF access control URL feature to allow all internal communication to that but drop all external access from the internet that tries to connect to the /api/important

At the same time I would like to allow all other https://www.test.com/? paths

Is this possible ?

Cheers

You need to have URL license

tbader-87 — Wed, 18 May 2016 16:58:39 GMT

You need to have URL license in your subscription

what is the subscription you ordered ?

We do have the URL license,

dclee — Wed, 18 May 2016 16:59:27 GMT

We do have the URL license, forgot to mention that 🙂

Hello ,

Jetsy Mathew — Wed, 18 May 2016 18:19:12 GMT

Hello ,

URL block or allow works in two different ways .

Either you can allow or block a URL based on the url cateogaries from the url database downloaded in the device.

Second way is adding a url manually to block or allow it as per your requirements. The source, destination and zones you can mention based on your requirement. To find the option, navigate to Policies > Access Control > Add Rule > URL > Click on Add to add the url manually and assign the actions.

Rate if this answer helps you.

Regards

Jetsy