URL Filter Byass in IOS

Unanswered Question
Mar 20th, 2009
User Badges:

I know in an ASA that I can allow certain IPs/Subnets to completely bypass url filtering. Is this possible in IOS based URL Filtering? Can i set deny entries in my Java List to do this?

Thanks in advance!

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
vikram_anumukonda Sat, 03/21/2009 - 02:52
User Badges:
  • Bronze, 100 points or more

"ip urlfilter exclusive-domain permit/deny x.x.x.x or xyz.com "


Java filtering :

ip inspect name <> http java-list 1


access-list 1 deny host 1.1.1.1

access-list 1 permit any


<< the above code would block only java-applets from being downloaded from 1.1.1.1 and permit the rest >>



HTH

Vikram

vikram_anumukonda Sat, 03/21/2009 - 05:49
User Badges:
  • Bronze, 100 points or more

if you want to block java applets in conjunction with url-filtering, you will have use the below command


ip inspect name <> http java-list 1 urlfilter

Actions

This Discussion