08-17-2011 02:23 PM - edited 03-11-2019 02:13 PM
Hi,
I am trying to find the best url filtering solution for our network.
We have a ASA5520 with an ASA-SSM-10 module connected to a 30mb DIA. We are trying to cut access to a number of web sites.
The experience I've had in the past when enabled the url filtering on one of our 7204 routers was no good. I remembered in and out traffic really slowed down because of this (I can't remembering if the inspection was taking too long or the traffic processing). I also remembered opening a TAC because of this and the answer was to disabled it and look for a Websense server solution.
I would appreciate if anyone out there with our same devices has something up and running without issues.
Please let me know what are the best options I can go with without negative side effects.
Thanks in advance.
08-17-2011 11:47 PM
Hi
URL Filetring on router without external server is only meant for a small list of web sites. Filtering requires lot computing power and hence italways advisable to have an external web filter to block large number of sites. Also external filter gives u various solid reporting options whioch are not provided by router itself.
Hope this helps.
Regards
Deepak Khemani
08-18-2011 07:48 AM
So what would be the best solution to address url filtering knowing we currently have an ASA5520 with IPS.
08-18-2011 09:09 AM
Hi Zeek,
For URL filtering you can either use a CSC-SSM module or a web sense toa complish this. I agree with Deepak that having devices like these would benefit better reporting than a router and also the scalablity option.
Here is the CSC release notes:
This would help you in reaching a decision.
Thanks,
Varun
08-18-2011 11:02 AM
your posted link doesn't work.
08-18-2011 11:04 AM
M sorry, I hope it works now:
-Varun
08-18-2011 11:05 AM
no it doesn't
08-18-2011 11:09 AM
08-18-2011 11:11 AM
Thank you
08-18-2011 11:11 AM
No Problem
08-18-2011 12:09 PM
have used Smartfilter & Ironport WSA. Smart filter might be more affordable but I think you will like Ironport Web Security Appliance.
Ron
Sent from Cisco Technical Support iPad App
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide