URL filtering in FWSM without an external server

[David Williams]

I have an FWSM running in multiple context mode running 3.2(18) code.  I have 3 urls that I would like to block so I can't justify the cost of an external URL filtering server.  I have found a way to filter individual URLs on the ASA but the same configuration does not seem to be available on the FWSM.  At least not on my code.  Does anyone know of any way to do this other than resolving the hostnames and blocking the current IP addresses?

thanks,

Dave

[Jennifer Halim · Accepted solution]

You are right, Regex URL filtering on FWSM is only supported from version 4.0.1 onwards.

Here is the sample configuration for your reference:

http://www.cisco.com/en/US/docs/security/fwsm/fwsm40/configuration/guide/mpf_f.html#wp1101685

Command reference:

http://www.cisco.com/en/US/docs/security/fwsm/fwsm41/command/reference/c1.html#wp1889922

Hope that helps.

[awais.afzal]

Dear concern,

 i want to url filter on fwsm module with version 3.1 but you blog you told  on regex available on 4.1 version 

is it posibal i filter ulr on fwsm module with 3.1 version

[Jennifer Halim]

Not if you would like to configure the fwsm module itself to filter url. Version 4.0.1 is the first version available with regex URL filtering.