Cannot Block Application FMC | ASA 5525

[NguyenNgocBa]

This is my policy table
My model is I configured on the FMC asa (Vmware) routing table network layer as pictured with the peplink device and at the same time configuring nat (i tried removing nat) but apparently the application like viber, outlook still works Even though there are internet policy rules

It seems that the deny policy of the asa firewall still has holes in the application department when I have tried quite a few ways but the application can still go out the internet but while the website was blocked

[Abheesh Kumar]

Hi,

Your rule will match the source destination traffic, as you mentioned the destination IP's.

Create a rule with source IP and destination any, then select the URL which you would like to block.

Create another rule with source IP, destination any and then select the application category and choose the application you would like to block.

HTH
Abheesh

[NguyenNgocBa]

Hi,

My intention is to want the ip address on the 2 visited sites and block all other applications .But it seems that asa does not understand, applications such as viber can still send messages while banned other sites.

I have created a rule block all below but it seems that I can not do my job

[Abheesh Kumar]

So only want to access 2 IP address and block all other applications right...????

[NguyenNgocBa]

Yes, my wish is that

[Abheesh Kumar]

create a rule with the Source & Destination IP and allow the URL which you would like to access.
Create another rule with the same source IP and rule action as Block.
So this will block all the traffic from the source you specified.

HTH
Abheesh

[NguyenNgocBa]

I have configured blocking policy like this and it does not understand blocking the application

[Abheesh Kumar]

can you change the action to BLOCK WITH RESET and try.

HTH
Abheesh

[NguyenNgocBa]

I have tried all the features, it just blocks the website and the applications are sometimes still out to the internet

[Abheesh Kumar]

As a testing, can you disable the URL allow rule for temporary and try. So all the traffic from inside to outside will get blocked.

HTH
Abheesh