topic Re: Adding URL and IP address to the Firewall in Network Security

Adding URL and IP address to the Firewall

MissLaura1989 — Mon, 11 Mar 2019 23:33:42 GMT

Hi,

I have Cisco ASDM 6.2 for ASA and I have been requested to add a list of URLs and IP address to the whitelist on the firewall.

I haven’t had much experience using this program so unsure of where I go to add these and I don’t want to risk changing anything that might affect the security of the firewall.

The address I need to add include:

IP address

https:// sites

http:// sites

Thanks

Adding URL and IP address to the Firewall

Jennifer Halim — Tue, 24 Jul 2012 09:23:51 GMT

Does the ASA have CSC module or are you trying to deny that using access-list?

If the ASA has CSC module then you would need to connect to the CSC/Trend Micro configuration section.

If you only use access-list to deny access, you can only use IP Address. The full URL needs to use REGEX to deny.

And you can't block HTTPS using URL as the URL is encrypted. HTTPS using IP Address can be blocked using access-list.

Re: Adding URL and IP address to the Firewall

Ramraj Sivagnanam Sivajanam — Fri, 27 Jul 2012 03:09:13 GMT

Hi Bro

I guess you've to use the regex method for now, as mentioned by Jennifer Halim above. This is because "access-list webtype" is widely used in SSLVPN. Click here for further details http://www.cisco.com/en/US/docs/security/asa/asa84/command/reference/a1.html#wp1599455

P/S: if you think this comment is useful, please do rate it nicely and select "This Question is Answered"

Re: Adding URL and IP address to the Firewall

nkarthikeyan — Fri, 27 Jul 2012 11:04:32 GMT

Hi Laura,

Either go for an CSC-SSM (Content Security and Control - Security Services Module) for URL whitelisting or regex is an open option but its quite little complicated.

Karthik

Re: Adding URL and IP address to the Firewall

nkarthikeyan — Fri, 27 Jul 2012 11:06:40 GMT

Hi Laura,

Also regex option works only for http.

Karthik