ASA with Websense - selective request forwarding

timbernat1 — Fri, 21 Feb 2020 15:45:24 GMT

Hi All,

I have been looking at URI filtering on our ASA 5525 and after successful implementation of regex-based filtering, I decided to scrap the idea because of no HTTPS support. It's good to play around with these things.

I am now interested in using our Websense to do this. The setup seems simple enough. However, I am not sure it could do exactly what we want; I would like to be able send certain traffic to the Websense but bypass other. I know this can be done with the exception commands, but it seems that these have to be IP based, for example

filter url except 10.10.10.1 255.255.255.255 0.0.0.0 0.0.0.0 allow.

Is it possible to this based on web addresses? For example, it's a really daunting task to do these things for 365; their IPs are constantly changing/expanding. I would like to be able to have some traffic bypassed, for example, https://outlook.office.com/mycompany.ca

Can I do that? I would like to be able to use an URI in the second part of the except command;

'if traffic from 10.10.10.1 255.255.255.255 is going to https://outlook.office.com/mycompany.ca allow'.

Thanks, Tim

Re: ASA with Websense - selective request forwarding

timbernat1 — Tue, 15 May 2018 10:27:27 GMT

Hi again, has anybody have any ideas on how to implement a version of this approach?

'if traffic from 10.10.10.1 255.255.255.255 is going to https://outlook.office.com/mycompany.ca allow'

Thank you, Tim

topic Re: ASA with Websense - selective request forwarding in Network Security

ASA with Websense - selective request forwarding

Re: ASA with Websense - selective request forwarding