How to block an URL in ironport ?

[pvinay2004]

How to block the URL in IronPort  https://example.domain.com/.* ?

[Robert Sherwin]

create a URL List for use w/ URL Filtering... 

• Hostnames such as: "example.com", "10.1.1.1", or "[2001:db8:85a3:8d3:1319:8a2e:370:7348]"
• Hostnames with wildcard '*' such as:
  • "example.com/*" or "example.com/path/*"
  • "10.1.1.1/*" or "10.1.1.1/path/*"
  • "[2001:db8:85a3:8d3:1319:8a2e:370:7348]/*" or "[2001:db8:85a3:8d3:1319:8a2e:370:7348]/path/*"
• Partial hostnames with wildcard '*' such as: "*.example.com", "*.example.com/*", or "*.example.com/path/*"

[anup]

This is incorrect - you cannot use URL Lists to block anything.

URL Lists can only be used for whitelisting URL reputation/category conditions

[balaji.bandi]

check WSA videos :

https://community.cisco.com/t5/video/gallerypage/user-login/Atazazuddin%20Shaikh

[shane.dollery]

You need to create a dictionary and use it in a Content Filter or a message filter that checks for Body Content matches.

Add your URL into the dictionary using regex. EG: ((?i)example\.domain\.com). If you get an error when adding it, type a random string, click add and modify once it's in the list before you submit and commit.

You can use this website to check your regex: regex101: build, test, and debug regex

Regards,

Shane