Rate limiting by fqdn on ASA 8.4.2

[Keith Hoover]

Is there a way to rate-limit by fqdn on ASA 8.4.2?  More specifically I want it to work with https.

I found this:  http://www.tunnelsup.com/cisco-asa-identity-firewall/ but am unsure how to apply it to a rate-limit instead of outright blocking.

Also, is there a way to log https traffic by fqdn and can that info be logged via NetFlow?  I know how to do it by ip via http but not by fqdn and https

[Vibhor Amrodia]

Hi,

As per your requirement , you can use the FQDN acl in the class map ACL and then apply the Rate Limiting policies:-

https://supportforums.cisco.com/document/66011/using-hostnames-dns-access-lists-configuration-steps-caveats-and-troubleshooting

http://www.cisco.com/c/en/us/support/docs/security/pix-500-series-security-appliances/91790-pixasa7x-traffic-mgt.html

Thanks and Regards,

Vibhor Amrodia