topic Re: URL blocking to be applied to specific users in Network Security

URL blocking to be applied to specific users

consult_srishti — Mon, 11 Mar 2019 17:07:13 GMT

Dear Team,

I am having ASA firewall 5520. I want to block yahoo mail, gmail using regex for particular users only.

How to go about it?

Thanks and Regards,

Divya

Re: URL blocking to be applied to specific users

bthompson001 — Wed, 10 Feb 2010 17:47:10 GMT

The first response on this particular post to the forum pretty much sums up how it's done. I've tried it per this gentleman's response and it does work.

https://supportforums.cisco.com/message/880042#880042

Re: URL blocking to be applied to specific users

Diego Armando Cambronero Arias — Wed, 10 Feb 2010 21:43:08 GMT

Unfortunatelly you cannot block the sites per user. You can block it based in the access-list that you apply to the Class-map but not based in the username of a user in a domain controller for example.

Re: URL blocking to be applied to specific users

Kureli Sankar — Thu, 11 Feb 2010 02:22:14 GMT

Divya,

The CSC module can do this based on active directory user accounts. It goes in the slot on the back of the ASA. Besides that you need to specify IP address and not username to block it.

You can read about the CSC module here: http://www.ciscosystems.co.ck/en/US/docs/security/csc/csc62/administration/guide/csc8.html

Another alternative is to use websense or N2H2 server on the inside to do content filtering.

-KS

Re: URL blocking to be applied to specific users

Panos Kampanakis — Fri, 12 Feb 2010 04:52:58 GMT

If you want to block the urls on the ASA only then use example in https://supportforums.cisco.com/docs/DOC-1268#Allow_every_url_for_specific_hosts_block_specific_urls_for_the_rest

It will give you exactly what you want.

I hope it helps.

URL blocking to be applied to specific users

mamer28983 — Sat, 08 Dec 2012 13:00:46 GMT

HI expert,

Would you please help me in this issue I have ASA 5510 and I need to block URL to be applied to specific users not using the IP address. I integrate ASA with my active directory now it’s (ASA) detecting the users from my domain but he is not applied the rules on the users.

It’s only working using the IP address using trend micro content security

Any help in this issue.

if you have any idea please contact me on my email :

mamer@vseegypt.com

mamer1983@hotmail.com

Thanks.