Blacking Web Sites using my ASA device

chris.amakulo1 — Tue, 12 Mar 2019 06:14:37 GMT

How do I blacklist and enable blocking of external sites I do not want people to visit from my network using ASA5545 device

I also need to block some

chris.amakulo1 — Thu, 09 Jul 2015 10:53:51 GMT

I also need to block some https:// traffic

Vibhor Amrodia — Thu, 09 Jul 2015 14:02:05 GMT

Hi,

With only the ASA device and no extra modules , you can only block HTTP url using the REGEX:-

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/100535-asa-8x-regex-config.html

Other than this , you can try to block HTTPS websites using the REGEX on the DNS queries through the ASA device.

I would recommend using an external module feature on the ASA device for this and as per the ASA model , Sourcefire should be the way to go:-

http://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/sfr/firepower-qsg.html

Thanks and Regards,

Vibhor Amrodia