topic Re: DNS in firewall rule in Network Security

DNS in firewall rule

suthomas1 — Mon, 11 Mar 2019 15:41:16 GMT

Hi,

What if we need to get in rule to permit certain site on ASA with the sites domain name & not based on IP. Can this be done by just putting in the site name"www.abc.com" or is there any other way.Please help.

Thanks.

Re: DNS in firewall rule

sachinraja — Wed, 10 Jun 2009 15:45:51 GMT

Hello Thomas

If you want to restrict access through URL's, you need to have a URL filtering software seperately , or have a CSC module with the ASA.. CSC can do content filtering.. With a plain ASA, you can just restrict traffic with IP addresses..

Hope this helps.. all the best..

Raj

Re: DNS in firewall rule

suthomas1 — Sat, 13 Jun 2009 02:16:33 GMT

How can i determine if my firewall has a CSC module.Any commands to check this out?

Thanks.

Re: DNS in firewall rule

manmeetshergill — Mon, 15 Jun 2009 11:31:29 GMT

Hi Thomas,

it can be done through regex (if u dont have a third party server like websense or n2h2)

http://supportwiki.cisco.com/ViewWiki/index.php/ASA_URL_filtering

http://www.cisco.com/application/pdf/paws/100535/asa-8x-regex-config.pdf

Re: DNS in firewall rule

abinjola — Mon, 15 Jun 2009 11:36:04 GMT

"How can i determine if my firewall has a CSC module"

You may use command show module 1 detail to verify this