URL Filtering

[Ernesto Fernandez gomez-pinto]

Hello,

It´s posible usu the URL filtering in IOS FW without external server?. I have think in:

ip url-filter excluded-domain deny .cisco.com

ip url-filter excluded-domain permit *.*

This work fine?

Regards.

[jackko]

the feature only works with external server, such as websense or n2h2.

[flopez]

He's right, I tried to use that command too, but it does not do anything by itself. You need websense or something like that.

I have used that URL-FILTER command on its own and it doesn't do anything by itself.

[engkaram]

Hello

Can you please explain this to me

"You need an external server like websence"??

I'm having the same problem with microsoft update site and http mails (hotmail)

[jackko]

websense is a non-cisco software, which focuses on web content filtering.

http://www.websense.com/global/en/

[flopez]

Websense and N2H2 are URL filtering servers that work with the PIX firewall. You use the URL-SERVER command so that when people type any address into their web browser, the client first looks into the accepted/denied URL list (according to your company's policy). The accepted and denied list of www addresses is stored in Websense or N2H2. They have predefined lists and are customizable. Hope this helps.