cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
996
Views
0
Helpful
3
Replies

Block domainlist by regex

Dear All,

 

I am using URL filter by regex on my ASA 5525 version 9.2(2)4 but it's not working. The domains are not blocked. Please find in attachment the config I used

 

 

 

3 Replies 3

Dears Support,

Thank in advance for your support.

Hi,

I think the problem is that url is TLS encrypted so I don't think you can block it.
Try with a domain that works with HTTP traffic to see if you have done it correctly.

br, Micke

Hi Michael,

 Thank for your feedback. I try with another domain http but still the same. Below the config. The traffic is from inside to outside.

 

regex speedtest "\.speedtest\.net"
class-map type regex match-any DomainBlockList
  match regex speedtest
class-map type inspect http match-all BlockDomainsClass
match request header host regex class DomainBlockList
policy-map type inspect http http_inspection_policy
parameters
protocol-violation action drop-connection
class BlockDomainsClass
reset log

access-list 103 extended permit ip any4 any4

class-map httptraffic
match access-list 103

policy-map inside-policy
class httptraffic
inspect http http_inspection_policy

service-policy inside-policy interface inside

Review Cisco Networking for a $25 gift card