Block web access on cisco asa 5525x

[khurramnawaz17]

I have cisco asa 5525x in my network and I want to block users to social websites i.e. ( youtube, facebook, dailymotion etc etc). I also want to block web access if someone use vpn and try to access these sites. I am new to asa please guide me how I can achieve this task through CLI and through ASDM. Thanks in advance.

[Marvin Rhoads · Accepted solution]

You can't really use a base ASA 5525-X for that purpose. It has some very crude filtering but it's not really usable for category-based filtering like you're asking about.

If you have the Firepower service module with URL filtering license you can setup a policy for it that blocks social media sites.

[Nikolaj Pabst]

Agree with Marvin..

The only issue is that the URL license is a bit useless now a days, when looking at the encryption percentage.. I would advice you to take a look at Umbrella instead, this might solve all your needs. Quick and easy to implement, and protects your clients off the network as well.

/Nikolaj

[Marvin Rhoads]

I'm with Nikolaj on the endorsement for Umbrella. It's an awesome product.