DNS in firewall rule

suthomas1 · ‎06-08-2009

Hi,

What if we need to get in rule to permit certain site on ASA with the sites domain name & not based on IP. Can this be done by just putting in the site name"www.abc.com" or is there any other way.Please help.

Thanks.

sachinraja · ‎06-10-2009

Hello Thomas

If you want to restrict access through URL's, you need to have a URL filtering software seperately , or have a CSC module with the ASA.. CSC can do content filtering.. With a plain ASA, you can just restrict traffic with IP addresses..

Hope this helps.. all the best..

Raj

suthomas1 · ‎06-12-2009

How can i determine if my firewall has a CSC module.Any commands to check this out?

Thanks.

abinjola · ‎06-15-2009

"How can i determine if my firewall has a CSC module"

You may use command show module 1 detail to verify this

manmeetshergill · ‎06-15-2009

Hi Thomas,

it can be done through regex (if u dont have a third party server like websense or n2h2)

http://supportwiki.cisco.com/ViewWiki/index.php/ASA_URL_filtering

or

http://www.cisco.com/application/pdf/paws/100535/asa-8x-regex-config.pdf