topic Re: Blocking Websites using FWSM in Network Security

Blocking Websites using FWSM

gagamboy15 — Wed, 13 Mar 2019 00:59:18 GMT

Hi everyone,

Does the FWSM can be used to block specific websites? If yes, kindly send me the link so I can study it.

Appreciate your help. Thanks in advance.

regards,

Gagamboy

Re: Blocking Websites using FWSM

Kureli Sankar — Sun, 28 Jun 2009 16:56:46 GMT

Yes, it can, if you know the IP address via an acl. Besides that if you want to block based on content then, you need websense or n2h2.

You can read here:

http://www.cisco.com/en/US/docs/security/fwsm/fwsm32/configuration/guide/filter_f.html#wp1042319

Re: Blocking Websites using FWSM

gagamboy15 — Sun, 28 Jun 2009 17:33:06 GMT

Thanks for the info Kusankar.

One question, I am using a proxy server, so how can I block specific URLs? I thinks it should be incoming via ACL or FWSM?

Sorry I did'nt have much idea on FWSM. Thanks in advance.

Re: Blocking Websites using FWSM

Kureli Sankar — Sun, 28 Jun 2009 22:46:56 GMT

The FWSM needs acl applied on all interfaces for traffic to flow.

It doesn't matter if you are using a proxy server. If you can resolve the name of the website to an IP address (hope that doesn't change) you can add a deny for this destination ip address on the FWSM interface that is facing the proxy server.

ex:

proxy ip 10.10.10.1--vlan10--FWSM---vlan20-Internet website (192.168.1.1)

I am using private addresses here:

you would add an acl to the access-list applied on vlan10.

access-list vlan10-in deny tcp host 10.10.10.1 host 192.168.1.1 eq 80

access-list vlan10-in permmit tcp host 10.10.10.1 any eq 80

access-g vlan10-in in int vlan10

You are denying the flow and then permitting the rest.