topic how to allow few url and block other in cisco asa 5510 in Network Security

how to allow few url and block other in cisco asa 5510

Hardik Vaidh — Tue, 12 Mar 2019 00:31:23 GMT

how to allow few url and block other in cisco asa 5510

Eugene Korneychuk — Mon, 03 Dec 2012 09:01:42 GMT

Hello Hardik,

In this example we will allow only cisco.com, and block everything else:

regex allowex2 "cisco\.com"

class-map type inspect http match-all allow-url-class
 match not request header host regex allowex2

policy-map type inspect http allow-url-policy
 parameters
 class allow-url-class
  drop-connection log
policy-map global_policy
 class inspection_default
  inspect http allow-url-policy

service-policy global_policy global

Hope it helps

how to allow few url and block other in cisco asa 5510

Hardik Vaidh — Mon, 03 Dec 2012 09:04:39 GMT

thnx

http and https both are block ??

how to allow few url and block other in cisco asa 5510

Eugene Korneychuk — Mon, 03 Dec 2012 09:13:52 GMT

Hello Hardick,

Only http.

HTTPS filtering is not supported on ASA. ASA cannot do deep packet inspection or inspection based on regular expression for HTTPS traffic, because in HTTPS, content of packet is encrypted (SSL).

You can also use URL filtering to direct specific traffic to an external filtering server, such an Secure Computing SmartFilter (formerly N2H2) or Websense filtering server. Long URL, HTTPS, and FTP filtering can now be enabled using both Websense and Secure Computing SmartFilter for URL filtering. Filtering servers can block traffic to specific sites or types of sites, as specified by the security policy.

For more information on URL filters, refer the following URLs:

http://www.cisco.com/en/US/docs/security/asa/asa81/config/guide/filter.html#wp1042606

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008088517b.shtml

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080940e04.shtml

Please, rate helpful posts

how to allow few url and block other in cisco asa 5510

Hardik Vaidh — Mon, 03 Dec 2012 09:22:42 GMT

thnx a lot dear...

I have more then two remote site.. and i want to block and allow url each center but every center have different requirement ... so it is possible in one cisco 5510 ASA for multiple location.. ?

how to allow few url and block other in cisco asa 5510

Eugene Korneychuk — Mon, 03 Dec 2012 09:26:36 GMT

You can configure different regex, for different requirement.

how to allow few url and block other in cisco asa 5510

Hardik Vaidh — Mon, 03 Dec 2012 09:31:33 GMT

ok thnx will check.. thnx a lot