URL Blocking on ASA 5545-X

[miank]

Hi,

I have ASA 5545-X in my network , i want to block Youtube & Facebook, but i did not find any URL blocking option in ASA by giving some keyword or URL ? Please if someone has any idea to accomplish this .. ?

[Ajay Saini]

Hello,

Standalone ASA is not the best of device when it comes to URL filtering. There is an option of using regex to block websites:

http://www.cisco.com/c/en/us/support/docs/security/adaptive-security-appliance-asa-software/115998-asa-http-product-configuration-example-00.html

But that will only help if the websites are http based. The URLs you mentioned are ssl based and that won't work as you require. You can review the firepower services, but thats an additional cost.

-AJ

[miank]

Thanks Ajay.. in fact i also need to block Apps of Youtube & facebook , is there any way to do it .. ?

[Ajay Saini]

hello,

If that is the case, you would be better off with Firepower with ssl policy. Firepower has the capability to block not only websites but app as well. Firepower has the a huge list of database and facebook and youtube are certainly there. 

an example post is below:

https://supportforums.cisco.com/discussion/13087291/facebook-chat-post-comment-block-firepower-60

If correctly configured, this works fine. You should contact your SE or accounts manager for details about procuring it or getting a demo.

-AJ