Blacking Web Sites using my ASA device

[chris.amakulo1]

How do I blacklist and enable blocking of external sites I do not want people to visit from my network using ASA5545 device

[chris.amakulo1]

I also need to block some https:// traffic

[Vibhor Amrodia]

Hi,

With only the ASA device and no extra modules , you can only block HTTP url using the REGEX:-

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/100535-asa-8x-regex-config.html

Other than this , you can try to block HTTPS websites using the REGEX on the DNS queries through the ASA device.

I would recommend using an external module feature on the ASA device for this and as per the ASA model , Sourcefire should be the way to go:-

http://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/sfr/firepower-qsg.html

Thanks and Regards,

Vibhor Amrodia