PIX515 And WebFiltering

[townofnewmarket]

Hey everyone.

PIX515E with a product from Secure Computing called WebSense to filter URLs. One of my users is a police detective, and I don't want to restrict where he can go. How do I tell the PIX to monitor all web usage except his??

[sachinraja · Accepted solution]

Hello Doug,

You can use the "filter url except" command to allow users go out to internet without doing URL filtering on websense. This user will be direct to internet, without any URL filtering.. I think this is what you needed, right ?? Find the IP address that the guy is connecting and use the following syntax:

url-server (perimeter) host 10.0.1.1

filter url 80 0 0 0 0

filter url except 10.0.2.54 255.255.255.255 0 0

here, 10.0.2.54 will be the police detective IP... all other traffic will be diverted to websense for URL filtering.... refer to filter command on CCO, to have more info on this:

http://cisco.com/en/US/products/sw/secursw/ps2120/products_command_reference_chapter09186a00801727a8.html#wp1131454

Hope this helps.. all the best.. rate replies if found useful..

Raj