Block some https sites on ASA 5508

[Ilya Semenov]

Hello, everybody!

Could it possible to filter some https sites on ASA 5508 without IPS subscription? I mean youtube.com, facebook.com, some local social nets...

Please, give a link to a useful manual.

Many thanks in advance,

Ilya

[nspasov · Accepted solution]

Hello Ilya-

I don't believe this is possible with the ASA by itself. You can use the MPF (Modular Policy Framework) to block HTTP based URLs:

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/100535-asa-8x-regex-config.html

However, this does not work for HTTPs. For that you will need to utilize the SSL inspection which is a FirePOWER feature. For that you can just get the URL Filtering Subscription (Without IPS, AMP.)

Thank you for rating helpful posts!