ASA 5520 – ACL Whitelist, Deny All Outbound Traffic, Allow outbound to

[mechanize]

Hi,

We have a small office, about 20 clients on LAN.

I need to allow outbound (internet) traffic from:

• Some (Group A / Guest PCs) clients to few websites / IP addresses only.
• Some (Group B) clients to all outbound traffic (unrestricted access to internet)

I’m thinking to arrange appliances as follows:

[ISP Router with DHCP] <> [ASA5520] <> [Managed Switch] <> LAN Clients

Can I use Cisco ASA 5520 to achieve above?

Will appreciate if someone can direct me to the right direction how to configure ASA5520 to create a whitelist IP / URLs for few clients (LAN IPs) to allow access to few websites only, whereas other clients should be able to have full access to the internet.

Thanks in advance

[mechanize]

I'm thinking about objects, object groups and webtype ACL to implement above, or am I wrong?

[MHM Cisco World]

https://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/general/asa_91_general_config/acl_webtype.pdf

Yes you can try web type ACL.