Blocking Website on ASA

[anthony.dyne]

Hi

I got ASA 5510 and need to block traffic to youtube and facebook for some users, can we do this on ASA.

Doing some research I found that its doable if you got Microsoft ISA or Bluecoat Proxy

thanks

Anthony

[Dan-Ciprian Cicioiu]

Hi Anthony,

Yes you can, using inspection rules on http.

Have a look at this document :

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080940c5a.shtml

Dan

[saquib.tandel]

Hello DAN, Anthony

I got Two subnets ( or say two vlans ) ; can I block url for one Subnet and allow for other subnet.

Setup goes like this...

ASA-----------------3560--------------2960_switches

On 3560

vlan 5

users

vlan 6

executive

interface vlan 5

ip address 10.1.1.1 255.255.255.0

interface vlan 6

ip address 10.1.2.1 255.255.255.0

ip route 0.0.0.0 0.0.0.0 192.168.1.100   (( 192.168.1.100 -  firewall inside IP ))

cheers

Saquib

[Marvin Rhoads]

I think you can. When you create the service policy rule, choose only the source network(s) you want to apply the rule to.

Here is the screen is ASDM that you would select that:

[saquib.tandel]

thanks marvin ; i will test this option

cheers

Saquib