Hi,
On this same question...
I'm trying to block certain web sites for the remote VPN clients on the ASA using MPF.
Sample config:
regex block1 "facebook\.com"
class-map type inspect http match-any block-url-class
match request header host regex block1
policy-map type inspect http block-url-policy
parameters
class block-url-class
drop-connection log
policy-map global_policy
class inspection_default
inspect http block-url-policy
service-policy global_policy global
This works for internal users, but not for the remote VPN clients that terminate on the ASA and then are rerouted to the Internet by the ASA.
Does the application inspection not apply for u-turn traffic like this? Is there a way to make it work?
Thank you,
Federico.
