Websense URL Filtering issue in ASA 5520 Firewall

[Ramu Ch]

Hi Team,

We have configured Websense Fitering in ASA 5520 Firewall as follows for default Networks:

url-server (inside) vendor websense host 172.*.*.* timeout 30 protocol TCP version 1
filter url http 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0
filter https 443 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0
filter ftp 21 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0

My Issue is , i need to by pass the above Rules for 192.168.x.0/24 & 192.168.Y.0/24 hence request you to give me the god Doc: desireble to my requirements or give the commands to configure

Regards

Ramu

[mirober2]

Hi Ramu,

You'll want to use the 'filter url except' command to configure the exceptions for those subnets. Here is an example:

filter url except 192.168.x.0 255.255.255.0 0 0

Here is the command reference for this:

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/ef.html#wp1933061

Hope that helps.

-Mike