Krishna,
You can try the following:
!-----------/ Begin Output /-----------!
regex domainlist1 "\.facebook\.com"
access-list inside_mpc extended deny tcp host 10.10.10.10 any eq www
access-list inside_mpc extended permit tcp any any eq www
class-map type regex match-any DomainBlockList
match regex domainlist1
class-map type inspect http match-all BlockDomainsClass
match request header host regex class DomainBlockList
class-map httptraffic
match access-list inside_mpc
policy-map type inspect http http_inspection_policy_blockdomains
parameters
protocol-violation action drop-connection
class BlockDomainsClass
reset log
policy-map global_policy
class httptraffic
inspect http http_inspection_policy_blockdomains
!------------/ End Output /------------!
The access list in bold are to exclude host 10.10.10.10 (example) from been inspected by regex, everything else will be blocked by the ASA to access facebook.
Hope it helps,
Juan Lombana
Please rate helpful posts.
