how to block https:// in asa 5520 v8.3

[Nikhil Patil]

Helloo Friends,

           I have ASA 5520 firewall with latest asdm version 8.3.

           i want to block some sites like  all social networking sites, chatting sites, porn sites, proxy sites, hacking sites......

          and  https:// site

          Is it possible in ASA 5520

         If yes then please guid me...

Regards,

Nik...

[Namit Agarwal]

Hi Nikhil,

It is definitely possible to block websites on the ASA. Here is a method of blocking it .Though the filtering of https websites based on URLs is not possible. Since the https traffic is encrypted we cannot inspect HTTPS traffic.

Using Regular Expressions

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080940e04.shtml

Also this document is a very interesting read https://supportforums.cisco.com/docs/DOC-1268

I hope this helps.

Thanks,

Namit

[Nikhil Patil]

Hi Namit,

             Is it possible through ASDM....

[Namit Agarwal]

Yes, please have a look at this http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080940e04.shtml#asa8.x I hope it helps

Regards,

Namit