cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

625
Views
0
Helpful
5
Replies
Mohd Khairul Nizam
Enthusiast

ASA webfilter using regex

Hi all,

I have a ASA 5510, it does webfilter using regular expression. (http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080940e04.shtml)

I block "\.facebook\.com" and it was successfull. But somehow other users is using https to access to FB.

Any ideas on how do i filter HTTPS?

1 ACCEPTED SOLUTION

Accepted Solutions

yes, to filter based on fqdn you need at least version 8.4(2). But be aware of the increased memory-requirements starting with version 8.3: http://www.cisco.com/en/US/docs/security/asa/asa83/release/notes/asarn83.html#wp454755

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

View solution in original post

5 REPLIES 5
lcambron
Participant

Im afraid this is not possible with the ASA, since the connection is encrypted, the ASA cannot inspect it.

You would need a different solution like websense.

Regards,

Felipe.

Karsten Iwen
VIP Mentor

If you are runing 8.4, then you can filter that in your ACL based on FQDN: https://supportforums.cisco.com/docs/DOC-17014

Sent from Cisco Technical Support iPad App

currently I'm using ASA Version 8.0(3). Does it mean i need to upgrade the firmware to 8.4 then I able to perform the https filter as you describe above??

yes, to filter based on fqdn you need at least version 8.4(2). But be aware of the increased memory-requirements starting with version 8.3: http://www.cisco.com/en/US/docs/security/asa/asa83/release/notes/asarn83.html#wp454755

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

View solution in original post

OK tq,

I will try and see the result.

Create
Recognize Your Peers
Polls
Which of these topics should we host an event in the Community?

Top Choice: pxGrid (39%)

Content for Community-Ad