Cisco 2911 IOS Fireall configuration for HTTPS trafic block

rsjavahar — Tue, 12 Mar 2019 04:00:26 GMT

I am configuring Cisco 2911 Sec-k9 router. i am able to block all the sites but not able to block Https Trafic like Facebook,youtube,some unwanted Sites. how to block them. i tried with key word blocking, but still https Sites are opening.

and i want give the full internet access to limited people

Router : Cisco 2911-Seck9 (no aditional licenses)

thanks in advance

Javahar

Without any additional

Karsten Iwen — Fri, 28 Mar 2014 10:32:23 GMT

Without any additional license or equipment, that's very hard to achieve.

The best way to solve that problem is to use an ASA-NGFW instead of the IOS-router.

If you have to stick with the router you could use Cisco Web Security (CWS) formaly known as Scansafe. But that needs also an additional license.

With only the router you could try some dirty hacks. For example you can deny all unwanted IPs (that of Facebook, Youtube ...) in an ACL. But that is very hard to manage. Or you could control the DNS-communication in a way that your DNS-server return an internal IP of your own webserver for all the unwanted domains.

But all in all, you are using the wrong tool for that problem.

topic Without any additional in Network Security

Cisco 2911 IOS Fireall configuration for HTTPS trafic block

Without any additional