Mutiple destination for single url

[Sumit Basak]

Hi All,

One of our client requested to allow one url hosted in internet. Destination ips are too many but at a time only one will be in working state,they keep changing the destination ips in a short time interval. Is there any solution is available for this kind of cases. We cant use proxy for this due to performance issue. Those ips can not be routed in our network too due to security policy.

Source : Multiple internal subnets

Destination: around 100 subnets

ports : 80/443

[Pulkit Saxena]

Hi Sumit,

Assuming that you are asking this query in regards to how we can allow this traffic through the ASA. Correct me if I am wrong but from the current understanding, it looks as if we want to allow inside users behind the ASA to have access to a particular url for which it has many IP addresses.

Please let me know if already your traffic from inside to outside is not allowed for all since most of the url's have multiple IP addresses.

If your requirement is to allow traffic to a specific URL, then you can use domain based access list.

Please read the below link and let me know if you have any query :

https://supportforums.cisco.com/document/66011/using-hostnames-dns-access-lists-configuration-steps-caveats-and-troubleshooting

-

Pulkit