IOS FW: http urlfilter and Squid??

[ryan.chapman]

Will squid work with IOS FW for http urlfiltering:. From what I've read on the subject, the vendor N2H2 speaks a protocol called "Internet Filtering Protocol," so I guess I need to know if squid can speak that protocol.

IOS also supports urlfiltering with a vendor called websense, so if squid or another open source program could speak that protocol, that would work.

If I'm going the wrong route, then how can I accomplish URLFiltering. I want to deny all URLs except the ones I specify in a database.

The database cannot reside on the router, because that will not scale, being as we have 50 remote office routers that the db must be applied to.

(In example below, squid running at 10.10.10.1)

ip inspect name myfw http urlfilter timeout 30

ip urlfilter server vendor h2h2 10.10.10.1

interface Ethernet 0

ip inspect myfw in

[#2]

i think n2h2 prots are propritary. So the best way is to use IOS's wccp features to utilise squid as an indirect proxy, then you can use squid filtering/ACL etc facilities to control access

[ryan.chapman]

Thanks for the reply. I checked into wccp but it appears that will not work. We're trying to implement this on the Cisco 827 series routers, which do not support WCCP, but do support urlfiltering.

Is anyone aware of any other solutions??