BLOCK SITE WITH ZBF ON ISR4331

[SAMEHELSAMMAK]

dear all

i have ZBF configured and running

but i want it also to block websites like : ssl-google-analytics.l.google.com

how can i do that ?

i tried to add it but it only accepts ip address not url.

Cisco IOS XE Software, Version 17.06.01a

securityk9 securityk9 Smart License securityk9
ipbase ipbasek9 Smart License ipbasek9

router : cisco ISR4331/K9

[balaji.bandi]

check this document may help you :

https://kxiwq67737.lithium.com/t5/security-documents/cisco-ios-how-to-block-websites-using-local-content-filtering/ta-p/3125242

[SAMEHELSAMMAK]

tried it already 

but it doesnt work on https sites

[balaji.bandi]

Most cases we use Firewall, (may be test in my later) how does the your config look like do you do inspect https?

https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/98628-zone-design-guide.html