cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
515
Views
0
Helpful
1
Replies

Clientless SSL VPN - blocking particular web pages

sjones1966
Level 1
Level 1

Hi,  I have configured a Clientless SSL VPN on an Asa 5520 to provide external access for staff to internal web resources.  This has worked well but I have now been asked if I can block access to particular pages so that they can never be accessed externally over the vpn.  e.g.  allow access to http://intranet/newshttp://intranet/staffdirectory but to block http://intranet/annualleave and also links from the intranet to other web resources running on other internal web servers http://anotherserver/data. Can this be done on the ASA or do I need to investigate alternate solutions?

Thanks   

1 Reply 1

Todd Pula
Level 7
Level 7

You can look at configuring a WebType filter under the respective group policy for your clientless users.  Please find the sample configuration doc below.

http://www.cisco.com/en/US/customer/docs/security/asa/asa80/asdm60/ssl_vpn_deployment_guide/deploy.html#wp1018414

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card