firewall asa 5500 url filter

[d401martinez]

I have a asa 55000 and have a server in dmz public with service running in http://xxxx.xxxx.xxxx:8080/mmcp/c  but have problema becouse the user access to http://xxxx.xxxx.xxxx:80808 it is a appache server i am needed block this, only use full address

[Zach Seils]

Hi d401martinez, This forum is for questions regarding the Cisco Application Centric Infrastructure (ACI) solution. I think you'll have a better chance of getting a useful response by posting your question in the Firewalling forum: https://supportforums.cisco.com/community/5966/firewalling Regards, Zach

[d401martinez]

thank you

br

Marcelo

[Marius Gunnerud · Accepted solution]

You could try using an ACL that matches on the FQDN of the web server. Something like the following:

name-server <dns server IP-1> <dns server IP-2>

object network WEB-SERVER
  fqdn xxxx.xxxx.xxxx

access-list LAN-to-WEB deny tcp any object WEB-SERVER eq 80808

access-list LAN-to-WEB permit ip any any

access-group LAN-to-WEB in interface inside

If this is not what you are looking for then you can use regex to match on the URL string.  But we can get into that later if we need to.

--

Please remember to select a correct answer and rate helpful posts