Using Domain Names in Access-lists

[netsec123]

Hi.

I've been trying a few ways but is there any way to accomplish:

access-list INBOUND deny ip any host www.google.com

???

This has been bugging me for awhile. If DNS is enabled on the FW, shouldn't this work?

Thanks!

[Collin Clark]

Nope, afraid you can't block the domain name in an ACL. You can use regex though.

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080940e04.shtml

Hope that helps.

[netsec123]

OMG!

I did not even know.

THANK YOU!

I will try this and get back...

THANKS!