topic Re: ASA website blocking in Network Security

ASA website blocking

Jon Moots — Mon, 11 Mar 2019 20:26:29 GMT

Can anyone tell me if it is possible to block a website or ip address from an ASA 5505? if it is possible, can you give me an example of the commands to get it done?

thanks

--jon

Re: ASA website blocking

Jennifer Halim — Thu, 28 Apr 2011 01:12:53 GMT

Assuming that your traffic is from the ASA inside interface towards the outside interface, and assuming that you have no access-list applied to the inside interface at the moment:

To block to a specific website:

access-list inside-acl deny tcp any host eq 80

access-list inside-acl permit ip any any

access-group inside-acl in interface inside

If you however already have an access-list applied to your inside interface, just add the deny statement above all the permit statement to block the access.

Hope that helps.

Re: ASA website blocking

Syed Usaid K — Thu, 28 Apr 2011 04:14:03 GMT

Adding to Jennifer's reply if your intent is also to block certain websites being accessed from the local LAN please check the below link,

https://supportforums.cisco.com/docs/DOC-1268

Regards,

Usaid.