Web filtering

[johnlloyd_13]

hi all,

currently, we're doing web filtering (on layer 3) via open dns cloud service.

i know we can do regex and use a CX module.

is there any other ways (or option) to do web filtering/DPI on the application layer with a NGN 5500-X firewall?

http://www.cisco.com/c/en/us/td/docs/security/asa/compatibility/asamatrx.html#pgfId-137099

http://www.cisco.com/c/en/us/td/docs/security/asacx/compatibility/cx_prsm_comp.html#pgfId-53163

[jj27]

You can also do SourceFire on the 5500-X, with the purchase of some licensing and a SSD if you don't already have one.

If those don't work, you can do WCCP with popular web-filters such as WebSense, etc.

[johnlloyd_13]

hi,

i've made some search on source fire but can this be standalone? meaning, i don't need to setup firesight management for the 5500x?

is there a way or a command to check if there's an SSD installed on the ASA 5500-x? is it shipped by default? i can't see it via show module and show inventory output.

wccp to another box is not an option here.

[johnlloyd_13]

i think i'm going for scansafe/cisco cloud web security since it uses our existing 5500 and some new 5500x ASAs.

http://www.cisco.com/c/en/us/products/collateral/security/adaptive-security-appliance-asa-software/whitepaper_C11-715169.html