cisco internet filtering for cisco asa 5515x

[Neetu Bhushan]

hi all,

i know either websense or smartfilter (btw, mcaffee is now not selling smart filter anymore) can be used in 5515x internet filtering but does cisco have it's own filtering software for its product?  please don't give an appliance, my company is small.

I'm tempting to use the default CLI command but there's no reporting on it i think.  Can it provide reporting for user access?  If it yes, please provide on how to do that.

thanks!

[Ken Stieers]

Neetu,

Yes, newer versions of the ASA can point web browsing at Cisco's ScanSafe cloud product.  Using ASDM 7.1(s)102, and ASA 9.0(2), go to Configuration >Device Managment > Cloud Web Security.

Otherwise, for On-Premise stuff, you're stuck with an appliance or a virtual appliance that runs on VMWare (to be released soon, its in FCS right now...) 

Ken

[Aaron Lamey]

I just installed the ASA CX (http://www.cisco.com/en/US/products/ps12521/index.html) onto my software module on the ASA 5512-X. All it required was a SSD and license for the software. If you know anything about the Ironport Web Security Appliances, ASA CX is basically the IronPort WSA running on the sw-module of the ASA.

The on-box version of the reporting/configuration engine (Cisco Prime Security Manager "PRSM") is simple but effective. Longer-term storage and drill-down reports requires an appliance or VMware virtual machine with the full-blown PRSM.

The neat thing about the CX is the ability to block not just domains, but drill down and block specific application features. Say you want to block Facebook Games but not Facebook itself, it is a simple configuration on the ASA CX.

I believe there is also a cloud version of it you can purchase, but I'm not sure of the details.

Good luck!