my goal is to block, MSN messenger, youtube, and peer-2-peer clients,

my cisco have a c870-advsecurityk9-mz.123-8.YI2 IOS, I think i can block ports with the cisco ACL but cant block msn and cant block by url, thats for I mind to combine with the netgear... just a think...

Hi, I contacted the Netgear support and they told me that my Netgear appliance have disabled the routing by default, so i just changed the subnet and attached to the my cisco router, that way I got a gateway between my router and my network with url filtering capabilities. Now I have the next question derived of the action I performed...

* In the cisco device I have configured Site to Site VPN with another remote identical cisco, I have a large ACL (access contro lists), i have NAT (port forwards for many virtual servers and many services...), and if now I have the Netgear to have a different subnet, it must became the DHCP server(I think) and default gateway for the network, is that right? If yes, the cisco NAT, ACL, VPN will become useless due a different subnet... is that a way to have the Netgear as a firewall but network clients having the cisco as a default gateway having the network to have the cisco subnet instead of the netgear-firewall subnet keeping all the cisco features as well as the netgear features... or May the cisco device handle with the Middle Netgear appliance and is there a way to keep all both devices features?

Cisco --> Netgear --> Network

Thanks in advance again.

Aldo

Your Cisco 870 series image should be able to do the job of a firewall, for the ease of use, Cisco provided the SDM,Security device manager. called it up by using https://routeripaddress. from there you can self explorer.

So, do you recommend me to do all the job with the cisco or add a new device to the network?