topic Re: Websense URL filtering with Cisco ASA? in Network Security https://community.cisco.com/t5/network-security/websense-url-filtering-with-cisco-asa/m-p/974235#M954347 <HTML><HEAD></HEAD><BODY><P>If your talking about identifying users over vpn I believe that you can use the Radius agent and bind it with your ACS.</P></BODY></HTML> Mon, 03 Mar 2008 21:09:27 GMT contreras 2008-03-03T21:09:27Z Websense URL filtering with Cisco ASA? https://community.cisco.com/t5/network-security/websense-url-filtering-with-cisco-asa/m-p/974232#M954339 <P>Hi,</P><P></P><P>Does anyone use Websense inline with their Cisco ASA for web filtering?</P><P></P><P>I'm trying to get my VPN's and client VPN's and Internal users have their web pages filtered and blocked based on our company policy.</P><P></P><P>Or failing that see if our ISP provide web filtering.</P><P></P><P>Thanks</P> Mon, 11 Mar 2019 12:11:39 GMT https://community.cisco.com/t5/network-security/websense-url-filtering-with-cisco-asa/m-p/974232#M954339 whiteford 2019-03-11T12:11:39Z Re: Websense URL filtering with Cisco ASA? https://community.cisco.com/t5/network-security/websense-url-filtering-with-cisco-asa/m-p/974233#M954343 <HTML><HEAD></HEAD><BODY><P>Assuming all Internet traffic is split tunneled for vpn.</P><P></P><P>Here's an example below the websense server is on the inside interface and it's ip is 10.255.40.164.</P><P></P><P>url-server (inside) host 10.255.40.164 timeout 30 protocol TCP version 4</P><P></P><P>The following command filters every HTTP request to all destinations. You can also choose to specify a source and destinaiton network to filter by. </P><P></P><P>filter url http 0 0 0 0</P><P></P></BODY></HTML> Mon, 03 Mar 2008 17:16:00 GMT https://community.cisco.com/t5/network-security/websense-url-filtering-with-cisco-asa/m-p/974233#M954343 contreras 2008-03-03T17:16:00Z Re: Websense URL filtering with Cisco ASA? https://community.cisco.com/t5/network-security/websense-url-filtering-with-cisco-asa/m-p/974234#M954345 <HTML><HEAD></HEAD><BODY><P>The issue I have found is that Websense cannot properly identify usernames. You will get the default policy when you surf.</P></BODY></HTML> Mon, 03 Mar 2008 19:51:39 GMT https://community.cisco.com/t5/network-security/websense-url-filtering-with-cisco-asa/m-p/974234#M954345 cplatt01 2008-03-03T19:51:39Z Re: Websense URL filtering with Cisco ASA? https://community.cisco.com/t5/network-security/websense-url-filtering-with-cisco-asa/m-p/974235#M954347 <HTML><HEAD></HEAD><BODY><P>If your talking about identifying users over vpn I believe that you can use the Radius agent and bind it with your ACS.</P></BODY></HTML> Mon, 03 Mar 2008 21:09:27 GMT https://community.cisco.com/t5/network-security/websense-url-filtering-with-cisco-asa/m-p/974235#M954347 contreras 2008-03-03T21:09:27Z Re: Websense URL filtering with Cisco ASA? https://community.cisco.com/t5/network-security/websense-url-filtering-with-cisco-asa/m-p/974236#M954349 <HTML><HEAD></HEAD><BODY><P>Are Websense the best URL filtering methods around?</P></BODY></HTML> Tue, 04 Mar 2008 15:08:39 GMT https://community.cisco.com/t5/network-security/websense-url-filtering-with-cisco-asa/m-p/974236#M954349 whiteford 2008-03-04T15:08:39Z Re: Websense URL filtering with Cisco ASA? https://community.cisco.com/t5/network-security/websense-url-filtering-with-cisco-asa/m-p/974237#M954351 <HTML><HEAD></HEAD><BODY><P>Websense will identify users a few different ways:</P><P>1) DC Agent - easiest (ties in with your AD structure)</P><P>2 - Logon Agent - most accurate, especially for academic type settings (many users on one PC)</P><P></P><P>As for Websense being the best, that is probably true, but it comes with a premium price tag. There are plenty of others out there, especially open source.</P></BODY></HTML> Tue, 04 Mar 2008 16:09:26 GMT https://community.cisco.com/t5/network-security/websense-url-filtering-with-cisco-asa/m-p/974237#M954351 cplatt01 2008-03-04T16:09:26Z Re: Websense URL filtering with Cisco ASA? https://community.cisco.com/t5/network-security/websense-url-filtering-with-cisco-asa/m-p/974238#M954353 <HTML><HEAD></HEAD><BODY><P>I use Surf Control Web Filter, not sure if it links well with the ASA's though for URL filtering.</P></BODY></HTML> Tue, 04 Mar 2008 16:26:36 GMT https://community.cisco.com/t5/network-security/websense-url-filtering-with-cisco-asa/m-p/974238#M954353 whiteford 2008-03-04T16:26:36Z Re: Websense URL filtering with Cisco ASA? https://community.cisco.com/t5/network-security/websense-url-filtering-with-cisco-asa/m-p/974239#M954354 <HTML><HEAD></HEAD><BODY><P>SurfControl was recently purchased by Websense. I believe any renewals, fall under the Websense side.</P></BODY></HTML> Tue, 04 Mar 2008 16:48:32 GMT https://community.cisco.com/t5/network-security/websense-url-filtering-with-cisco-asa/m-p/974239#M954354 cplatt01 2008-03-04T16:48:32Z