I am trying to find the best url filtering solution for our network.
We have a ASA5520 with an ASA-SSM-10 module connected to a 30mb DIA. We are trying to cut access to a number of web sites.
The experience I've had in the past when enabled the url filtering on one of our 7204 routers was no good. I remembered in and out traffic really slowed down because of this (I can't remembering if the inspection was taking too long or the traffic processing). I also remembered opening a TAC because of this and the answer was to disabled it and look for a Websense server solution.
I would appreciate if anyone out there with our same devices has something up and running without issues.
Please let me know what are the best options I can go with without negative side effects.
Thanks in advance.
URL Filetring on router without external server is only meant for a small list of web sites. Filtering requires lot computing power and hence italways advisable to have an external web filter to block large number of sites. Also external filter gives u various solid reporting options whioch are not provided by router itself.
Hope this helps.
So what would be the best solution to address url filtering knowing we currently have an ASA5520 with IPS.
For URL filtering you can either use a CSC-SSM module or a web sense toa complish this. I agree with Deepak that having devices like these would benefit better reporting than a router and also the scalablity option.
Here is the CSC release notes:
This would help you in reaching a decision.
M sorry, I hope it works now:
have used Smartfilter & Ironport WSA. Smart filter might be more affordable but I think you will like Ironport Web Security Appliance.
Sent from Cisco Technical Support iPad App