09-17-2014 01:06 PM - edited 03-11-2019 09:46 PM
Hi,
I need create a new firewall rule using a regex. I looking for this in all Cisco documentation but I do not found nothing about it. Can Cisco ASA support this kind of firewall rule ?
Thanks,
Solved! Go to Solution.
09-18-2014 12:32 AM
To only allow the domain google.com you would do something like the following:
access-list TRAFFIC extended permit tcp any any eq www
regex DOMAIN1 "\.google\.com"
class-map type regex match-any DOMAIN-LIST
match regex DOMAIN1
class-map type inspect http match-all URL
match not request uri regex class DOMAIN-LIST
class-map WEB-TRAFFIC
match access-list TRAFFIC
policy-map type inspect http HTTP-POLICY
class URL
drop-connection
policy-map inside_policy
class WEB-TRAFFIC
inspect http HTTP-POLICY
--
Please remember to select a correct answer and rate helpful posts
09-17-2014 02:26 PM
Are you talking about using a FQDN in an access list like the following (this requires the ASA to be configured with DNS servers)?
name-server 192.168.1.1 192.168.1.2
object network URL
fqdn my.company.com
access-list TEST permit ip any object URL
access-group TEST in interface inside
or
Are you looking to use the modular policy framework (MPF) to match on URL strings?
This link explains this fairly well:
--
Please remember to select a correct answer and rate helpful posts
09-17-2014 02:52 PM
I need allow by Firewall rule one regular expression like this *.google.com. I think it is very simple in proxies.
09-18-2014 12:32 AM
To only allow the domain google.com you would do something like the following:
access-list TRAFFIC extended permit tcp any any eq www
regex DOMAIN1 "\.google\.com"
class-map type regex match-any DOMAIN-LIST
match regex DOMAIN1
class-map type inspect http match-all URL
match not request uri regex class DOMAIN-LIST
class-map WEB-TRAFFIC
match access-list TRAFFIC
policy-map type inspect http HTTP-POLICY
class URL
drop-connection
policy-map inside_policy
class WEB-TRAFFIC
inspect http HTTP-POLICY
--
Please remember to select a correct answer and rate helpful posts
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: