ASA access rule to ip that changes

sfisher · ‎02-10-2010

I have an ASA 5510

I'm trying to get an access rule that allow https traffic to www.download.windowsupdate.com

The www.download.windowsupdate.com resolves (for me) to an akamai IP 63.97.123.59

I try again later it resolves to an akamai IP 63.80.4.74

earlier it was 204.203.18.138

I can create an access rule to allow an IP range for a while, then another IP comes along and traffic is denied.

I'm pretty sick of the playing chase the IP.

Is there any way to link an access rule to a domain name other than an IP?

Kureli Sankar · ‎02-10-2010

I am afraid not.

access-list only takes object groups (which contain IPs) or IP address in them.

-KS