url-filter

r.lusignan · ‎11-23-2009

Hi,

I'm looking form confirmation on whether or not you can use a non-websense or secure computing Proxy server with the url-filter option on FWSM/ASA code. The documentation specifically states those vendors, but I have seen a few posts referencing Squid, but none confirm that you can use the url-filter command and point it to a server like Sophos or Ironport and have it work. Does anyone have any experience with this? Thanks in advance.

-Russ

Farrukh Haroon · ‎11-23-2009

Only Websense/Secure Computing (N2H2) are officially supported:

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/access_filter.html#wp1042342

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008088517b.shtml

Regards

Farrukh

Jim Thomas · ‎11-23-2009

There are other vendors software that does work, however from the ASA standpoint they are either websense or smartfilter (n2h2). These other vendors take in the websense format and process the packets. Its lying to the ASA basically.

Jim Thomas Cisco Security Course Director Global Knowledge CCIE Security #16674