cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1084
Views
1
Helpful
4
Replies

How to block an URL in ironport ?

pvinay2004
Level 1
Level 1

How to block the URL in IronPort  https://example.domain.com/.* ?

4 Replies 4

Robert Sherwin
Cisco Employee
Cisco Employee

create a URL List for use w/ URL Filtering... 

  • Hostnames such as: "example.com", "10.1.1.1", or "[2001:db8:85a3:8d3:1319:8a2e:370:7348]"
  • Hostnames with wildcard '*' such as:
    • "example.com/*" or "example.com/path/*"
    • "10.1.1.1/*" or "10.1.1.1/path/*"
    • "[2001:db8:85a3:8d3:1319:8a2e:370:7348]/*" or "[2001:db8:85a3:8d3:1319:8a2e:370:7348]/path/*"
  • Partial hostnames with wildcard '*' such as: "*.example.com", "*.example.com/*", or "*.example.com/path/*"

This is incorrect - you cannot use URL Lists to block anything.

URL Lists can only be used for whitelisting URL reputation/category conditions

balaji.bandi
Hall of Fame
Hall of Fame

shane.dollery
Level 1
Level 1

You need to create a dictionary and use it in a Content Filter or a message filter that checks for Body Content matches.

Add your URL into the dictionary using regex. EG: ((?i)example\.domain\.com). If you get an error when adding it, type a random string, click add and modify once it's in the list before you submit and commit.

You can use this website to check your regex: regex101: build, test, and debug regex

Regards,

Shane

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: