topic Re: Limits filtering urls using MPF on the ASA5520 in Network Security

Limits filtering urls using MPF on the ASA5520

mfalcon818 — Sun, 10 Mar 2019 11:13:40 GMT

Can anyone give 2-3 good reasons for doing url filtering using the CSC instead of MPF? Is there a limit on the number of entries in the list? How about other resource or process hits to the ASA?

Re: Limits filtering urls using MPF on the ASA5520

rhermes — Thu, 31 Jul 2008 14:39:39 GMT

mfalcon -

This forum might not be the best place to ask a URL filtering questions. The IDS/IPS aspects of the ASA are usualy as deep as the discussions go into the ASA chassis here. You might try asking in the Firewall forum.

Re: Limits filtering urls using MPF on the ASA5520

Farrukh Haroon — Fri, 01 Aug 2008 01:10:42 GMT

Here are some reasons:

1) The ASA can only have 4GE interface card, AIP -SSM (IPS) or the CSC at once. If you need the other two the only remaining choice is MPF or external server

2) Cost! The CSC costs money, and maybe a particular customer requires just to block a handful of websites, the CSC would be over-kill there.

Regards 🙂

Farrukh