Pix firewall Access list problem

[mrharish_123]

I want to block some particular website using pix firwall 501. I tryied is many times but didn't find the solution.

[chetankamra]

Hi,

Did you tried creating n access-list and and denying the specifies website ip from outside to internal /internal to outside request.

Following is an example:

access-list acl_out deny tcp 192.168.1.0 255.255.255.0 host 198.64.153.138 eq www

Description:

Acl-Out is access0-list name

192.168.1.0 is local subnet

198.64.153.138 is Public website Ip

www is http Port i.e. 80

To apply thsi access-list to interface we use:

access-group acl_out in interface outside

Thanks

Ck

Rate is it helped