Can the PIX only filter by IP address without the help of a 3rd party product ?
For example, if I want to put a filter/access-list rule in place to prevent access to www.pornsite.com, but allow access to www.business_content.com, this does not seem possible in the PIX - while this feature is in all of the competitions products - firewall does DNS lookup, prevents or denies access to URL based on URL name in ACL.
Filtering strictly by destintion IP address is not viable - and not always workable if the destination is a "Virtual server" ,or has hundreds of resolvable addresses (take yahoo for example).
Are there and open-source alternaitves to N2H2 or
websense ?
I'm interested in creating a small outbound "White List" of limited sites that our remote offices are authorized to access, not managing the entire Internet !
I suppose I could prevent access to DNS servers, and create a"HOSTS" file that only contained authorized sites, but that's really only securty through obsecurity, and not a real solution !
Any suggestions appreciated, without the need to put
in more hardware and run a squid proxy to do the job the PIX should be able to do on it's own !
