topic Re: ASA and URL-Filtering in Network Security https://community.cisco.com/t5/network-security/asa-and-url-filtering/m-p/874769#M969255 <HTML><HEAD></HEAD><BODY><P>This problem may appear because of URL getting truncated. Add the following statement to your URL filtering statements:</P><P>filter url http <SOURCE_NETWORK> <SUBNET_MASK> 0.0.0.0 0.0.0.0 allow longurl-truncate</SUBNET_MASK></SOURCE_NETWORK></P><P></P></BODY></HTML> Fri, 21 Sep 2007 21:04:50 GMT tstanik 2007-09-21T21:04:50Z ASA and URL-Filtering https://community.cisco.com/t5/network-security/asa-and-url-filtering/m-p/874768#M969254 <P>I have recently deployed two ASA in Active/Standby failover mode. When a users goes to a site such as hotmail.com, the connection appears to be blocked, generating the syslog message below. </P><P></P><P>Sep 17 13:12:19 gateway-fw-i %ASA-5-304002: Access denied URL SRC 10.X.X.X DEST 207.46.8.249 on interface inside</P><P>Sep 17 13:12:20 gateway-fw-i %ASA-6-302014: Teardown TCP connection 1807606 for outside:207.46.8.249/80 to inside:10.X.X.X/1847 duration 0:00:03 bytes 1393 Flow closed by inspection</P><P></P><P>However, hitting F5 seems to bypass the filter. Has anyone seen this issue before? The url server is Websense and the filtering config is listed below. </P><P></P><P>url-server (inside) vendor websense host 10.x.x.x timeout 30 protocol TCP version 4 connections 25</P><P>url-cache dst 128</P><P>filter url http 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 allow </P><P>filter url 443 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 allow </P><P>url-block block 128</P><P></P><P>The code is Cisco Adaptive Security Appliance Software Version 7.0(6)</P><P></P><P></P> Mon, 11 Mar 2019 11:12:20 GMT https://community.cisco.com/t5/network-security/asa-and-url-filtering/m-p/874768#M969254 dtjacob 2019-03-11T11:12:20Z Re: ASA and URL-Filtering https://community.cisco.com/t5/network-security/asa-and-url-filtering/m-p/874769#M969255 <HTML><HEAD></HEAD><BODY><P>This problem may appear because of URL getting truncated. Add the following statement to your URL filtering statements:</P><P>filter url http <SOURCE_NETWORK> <SUBNET_MASK> 0.0.0.0 0.0.0.0 allow longurl-truncate</SUBNET_MASK></SOURCE_NETWORK></P><P></P></BODY></HTML> Fri, 21 Sep 2007 21:04:50 GMT https://community.cisco.com/t5/network-security/asa-and-url-filtering/m-p/874769#M969255 tstanik 2007-09-21T21:04:50Z