Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

URL Filter allowing subfolder

Hello,

I have on my Cisco asa 5510 the URL filtering running with regex. The problem that i have now is that i want to allow part of a domain.

For example i want to block cnn.com but i want to allow people to access cnn.com/AFRICA/

I was looking on the ASA URL filtering document but it has an example for sub domains, not for sub folders.

Bellow is my config

regex blockex8 "rojadirecta\.org"

regex blockex9 "megaupload\.org"

regex blockex1 "/facebook/"

regex blockex2 "facebook\.com"

regex blockex3 "taringa\.net"

regex blockex4 "twitter\.com"

regex blockex5 "rapidshare\.com"

regex blockex6 "ustream\.com"

regex blockex7 "youtube\.com"

access-list user-acl extended deny tcp host 172.16.16.133 any eq www
access-list user-acl extended deny tcp host 172.16.16.46 any eq www
access-list user-acl extended deny tcp host 172.16.16.0 any eq www
access-list user-acl extended deny tcp host 172.16.16.226 any eq www
access-list user-acl extended deny tcp host 172.16.16.87 any eq www
access-list user-acl extended permit tcp any any eq www
class-map block-user-class
match access-list user-acl
class-map inspection_default
match default-inspection-traffic
class-map type inspect http match-any block-url-class
match request uri regex blockex1
match request header host regex blockex2
match request header host regex blockex4
match request header host regex blockex5
match request header host regex blockex6
match request header host regex blockex7
match request header host regex blockex8
match request header host regex blockex9
match request header host regex blockex3
policy-map type inspect http http-inspect-pol
parameters
policy-map block-user-url-policy
class block-user-class
  inspect http block-url-policy
service-policy block-user-url-policy interface inside

2 REPLIES
Cisco Employee

Re: URL Filter allowing subfolder

Hi,

Please look into https://supportforums.cisco.com/docs/DOC-1268

It has examples that will help you with what you want to do.

PK

New Member

Re: URL Filter allowing subfolder

I made my config thanks to that document but there is no example about what im traying to do.

There is for subdomains in the last part of the document:

regex block-fb ".*facebook\.com"
regex allow-fb "developer[s]*\.facebook\.com"

but there isnt for subfolder.

I was traying differents kinds like "*\.cnn\.com\AFRICA\"    or  "*\.cnn.com\AFRICA\"    or "*\.cnn.com/AFRICA/" but nothing.

659
Views
0
Helpful
2
Replies