topic Re: URL Filtering on ASA 5520? in Network Security

URL Filtering on ASA 5520?

whiteford — Mon, 11 Mar 2019 12:09:43 GMT

Hi, I am currently filtering users web sites internally via a product called Surf Control (now owed my Websense). The thing is I have now configured the ASA to accept VPN connections from users. They can get access to the internet but it is not monitored. Currently the inside port of the ASA plugs into a Cisco 3750 vlan switch where there is a surfcontrol server too and port mirroring. I think the VPN users bypass this and go through the outside interface instead so they are not filtered.

What do other network guys do to block websites?

thanks

Re: URL Filtering on ASA 5520?

srue — Wed, 27 Feb 2008 20:26:25 GMT

so the URL filtering works normally as it should for local LAN users. It's just for remote access vpn users that it's not working for?

Re: URL Filtering on ASA 5520?

whiteford — Wed, 27 Feb 2008 20:34:48 GMT

Yeah that's right

Re: URL Filtering on ASA 5520?

adcorbett_2 — Mon, 16 Jun 2008 18:30:04 GMT

Any more anwers on this? I am having the same issue.

Re: URL Filtering on ASA 5520?

nomair_83 — Tue, 17 Jun 2008 04:16:52 GMT

Yup, I think vpn users redirect from the outside interface to the internet.

Re: URL Filtering on ASA 5520?

carl_townshend — Thu, 04 Sep 2008 12:33:15 GMT

Hi there

First of all, you need to make sure your users are using the proxy in there settings.

Then, all you need to do is a static nat from your proxy server to a public address from your pool. Then create a rule just to allow ftp,ssl,and http from your proxy server only.

I would also make sure that you have not enabled traffic between 2 or more hosts connected to the same interface, this may be what it is.

cheers

Carl