08-17-2011 02:23 PM - edited 03-11-2019 02:13 PM
Hi,
I am trying to find the best url filtering solution for our network.
We have a ASA5520 with an ASA-SSM-10 module connected to a 30mb DIA. We are trying to cut access to a number of web sites.
The experience I've had in the past when enabled the url filtering on one of our 7204 routers was no good. I remembered in and out traffic really slowed down because of this (I can't remembering if the inspection was taking too long or the traffic processing). I also remembered opening a TAC because of this and the answer was to disabled it and look for a Websense server solution.
I would appreciate if anyone out there with our same devices has something up and running without issues.
Please let me know what are the best options I can go with without negative side effects.
Thanks in advance.
08-17-2011 11:47 PM
Hi
URL Filetring on router without external server is only meant for a small list of web sites. Filtering requires lot computing power and hence italways advisable to have an external web filter to block large number of sites. Also external filter gives u various solid reporting options whioch are not provided by router itself.
Hope this helps.
Regards
Deepak Khemani
08-18-2011 07:48 AM
So what would be the best solution to address url filtering knowing we currently have an ASA5520 with IPS.
08-18-2011 09:09 AM
Hi Zeek,
For URL filtering you can either use a CSC-SSM module or a web sense toa complish this. I agree with Deepak that having devices like these would benefit better reporting than a router and also the scalablity option.
Here is the CSC release notes:
This would help you in reaching a decision.
Thanks,
Varun
08-18-2011 11:02 AM
your posted link doesn't work.
08-18-2011 11:04 AM
M sorry, I hope it works now:
-Varun
08-18-2011 11:05 AM
no it doesn't
08-18-2011 11:09 AM
08-18-2011 11:11 AM
Thank you
08-18-2011 11:11 AM
No Problem
08-18-2011 12:09 PM
have used Smartfilter & Ironport WSA. Smart filter might be more affordable but I think you will like Ironport Web Security Appliance.
Ron
Sent from Cisco Technical Support iPad App
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: