topic ASA/PIX Websense filter exception functionality in Network Security

ASA/PIX Websense filter exception functionality

NotMeHere — Mon, 11 Mar 2019 12:19:56 GMT

So when you use the "filter url exception" command, does the firewall still inform the Websense server of the URL and just allows it out. Or does the firewall totally not report on URLs from those addresses to Websense?

Re: ASA/PIX Websense filter exception functionality

abinjola — Wed, 19 Mar 2008 19:45:37 GMT

To accomplish URL filtering, pix can be configured with

> Websense (www.websense.com) or N2H2 (www.n2h2.com) in this way:

> a)A client establishes a TCP connection to a web server.

> b)The client sends an HTTP request for a page on this server.

> c)The pix intercepts this request and hands it over to the

> filtering server. d)The filtering server decides if the

> client should be allowed access to the requested page. e)If

> the decision is positive, the pix forwards the request to the

> server and the client receives the requested content. f)If

> the decision is negative, the client's request is dropped.

> NOTE: Websense works with pix version 5.3 onwards and N2H2

> works with pix version 6.2 onwards. These can only perform

> HTTP filtering not FTP or HTTPS. Although for blocking ftp

> sites, a URL like ftp://ftp.somedomain.com can be entered.

however pix do not report the query to websense when you run the exception command

hope it answers your Query

Re: ASA/PIX Websense filter exception functionality

ronj — Fri, 25 Apr 2008 15:09:50 GMT

No the exception command removes websense from that traffic.

Re: ASA/PIX Websense filter exception functionality

jogillis — Mon, 28 Apr 2008 17:38:10 GMT

Actually in step c) the pix will send the request to the web server as well as checking with the filtering server to see if it is permitted. Then in step f) if the response is negative, the pix will drop the return packet from the web server.

Re: ASA/PIX Websense filter exception functionality

rextillojr — Thu, 01 May 2008 04:42:26 GMT

The firewall doesn't inform Websense, it just allow the traffic.

Regards