How to access list control by domain-name for Pix 515E?

[sean chang]

Say I want to control a PC to be able to connect only to FEDEX.COM, but the access-list control only takes IP address, Fedex.com is mapped to lots of IPs which can change some time. I know I might get this done by something like AAA rules, can I get this done by using Access Rules only? Please help. ( we used checkpoint firewall-1 before which controls access either by domain name or IP).

Lots of thanks for any help.

[sachinraja]

Hello,

you cannot filter URLs with access rules .... you might have a look at some URL filtering solutions like websense or N2H2 for this.. PIX can integrate with both these softwares for URL filtering solutions.... refer to CCO for more info on this....

Raj