Web Filtering

[shijomon scaria]

Hello Sir, i have 300 systems inside my network, all those have web access also. Here my requirement is to block some specific web sites and also i want to log the deatils about the users who are trying to use those sites. Thank you.

[a.ajiboye]

Hi,

You can block access to web sites and logs reports about sites blocked or allowed through the firewall by implementing the filtering feature of Cisco firewall. This is done by integrating the Firewall with either the Websense or Secure Computing web filtering software.

[cisco24x7]

Can it be done with just Pix or ASA?

The answer is a NO unless you are willing to

buy Websense or N2h2 (or whatever they call it now) as the previous poster say.

Can it be done with other firewall vendors and

NOT requiring a 3rd parties software such

as Websense or N2H2?

The answer is YES if you use checkpoint

firewalls. You can block specific sites by

domains and with URI resource logging, it

will meet your requirements.

CCIE Security

[shijomon scaria]

Thank you all.....i hv one more doubt is there, we are having a Sonicwall 2040 pro is in our network, we want to enable url blocking in it, sonicwall permits url blocking by itself. Is it possible to over ride this blocking rule by some proxy softwares...??

[abhisheksen]

I think this can be done with ASA only.Please check this url:http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080940e04.shtml

[bluestarenergyservices]

Hi, i try http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080940c5a.shtml#diag

and http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080940e04.shtml

and the people can browse www.youtube.com :-(

Who know or made it? Can you help please !!

[chickman · Accepted solution]

Just to put this out there, you could use a free service to assist. Take a look at OpenDNS, www.OpenDNS.com. This will provide you with similar ability as variety of pay services. The downside to this, you will not be able to report on user-website use. It will though give you information about website attempts and such.

Just as an additional resource.