How to block a particular website like "https://www.youtube.com" and torrent downloads using cisco ips 4240??

[kantamrajusharma]

I have basic knowledge about cisco ips....recently our company purchaged a cisco ips 4240 ....and temporarly i am using it for my practice purpose ......i want to block a website which works with "https" ..... For eg: "https://www.youtube.com "....i failed to block it by router and firewall (ASA 5510).....now i just want to try with cisco ips 4240...but i really dont know the procedure....some one please help me with the clear configuration in GUI or in CLI ...if we need to make any changes to the signatures...let me know the process...thanks in advance...if any one who is having knowledge on cisco ips  is interested in showing it practically they can contact me at kantamrajusharma@gmail.com

[sawgupta]

Hi,

For torrent, you may use the existing signature 11020.

For blocking websites, you can write a custom signature under HTTP engine to check the HTTP Requests. and look for string "https" in URL.

Regards,

Sawan Gupta

[networldz99]

hi sawan gupta...thanks for solution...but could you please make it more clear which fields i have to fill and what i have to fill to block a website like https://www.youtube.com...

For your convinience i am attaching the screen shot here....

        and also mention which event action i have to select....

[sawgupta]

Specify Regex URI as

[Yy][Oo][Uu][Tt][Uu][Bb][Ee]

Under Event Action, choose deny action.

Regards,

Sawan Gupta

[kantamrajusharma]

hiiii sawan guptha....

This is not working anymore.....i found my sensor license expired......does it effect the functionality of a custom made signature....