Blocking of Websites

[sagarshaha]

Hello,

I am having 506e firewall, is there any way to block the sites(youtube,torrentz,etc) in the firewall.

Thanks in advance

[accesshollywood2]

I am not sure. We use websense for all web traffic.

[sagarshaha]

thanks for the prompt response

what is websense, do we need to purchase a third-party security

is it not possible to do in our pix only?

[accesshollywood2]

Also, if you wanted to block YOUTUBE, you would have to block every single IP address that YOUTUBE has, which could be up to 50? or more.. but it can be done..

access-lists is where it would be.

[vabruno]

You can point your PIX to an external Websence server for URL filtering or upgrade to Cisco ASA 5505 and higher and you can use the inspect policies to filter on application layer content.

[srue]

if you have an IOS device capable of NBAR, you can use it to match on url strings and block traffic that way. it's crude, but it works easily.