topic Re: Cisco ASA5510 in Network Security

Cisco ASA5510

saroj pradhan — Mon, 11 Mar 2019 23:30:14 GMT

I have cisco ASA5510 firewall using in my network but unable to bolck Url's unwanted.

can i block the https://facebook.com on the asa by using regular exp.

Thanks,

Saroj

Cisco ASA5510

Jennifer Halim — Thu, 12 Jul 2012 13:02:22 GMT

Sure can.

here is the sample config for your reference:

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080940e04.shtml

Re: Cisco ASA5510

Karsten Iwen — Thu, 12 Jul 2012 13:36:48 GMT

The ASA can not inspect HTTPS. You could deny name-resolution for facebook.com or use a proxy-server that can inspect HTTPS-traffic.

Re: Cisco ASA5510

Dinkar Sharma — Thu, 12 Jul 2012 22:03:04 GMT

Hi,

You can not block https as the "get-request' for the facebook.com will be encypted. However you can use ASA to block facebook based on your DNS request in case you dns request is passing through the ASA. ASA can inspect that DNS packet and based on regex you can deny that dns request.

In this way user will never be able to connect to facebook.com (3-way handshake).

but if you are using an internal DNS server, ASA won't be receiving the request if it is in same LAN segment.

Regards,

Dinkar