Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

IOS FW: http urlfilter and Squid??

Will squid work with IOS FW for http urlfiltering:. From what I've read on the subject, the vendor N2H2 speaks a protocol called "Internet Filtering Protocol," so I guess I need to know if squid can speak that protocol.

IOS also supports urlfiltering with a vendor called websense, so if squid or another open source program could speak that protocol, that would work.

If I'm going the wrong route, then how can I accomplish URLFiltering. I want to deny all URLs except the ones I specify in a database.

The database cannot reside on the router, because that will not scale, being as we have 50 remote office routers that the db must be applied to.

(In example below, squid running at 10.10.10.1)

ip inspect name myfw http urlfilter timeout 30

ip urlfilter server vendor h2h2 10.10.10.1

interface Ethernet 0

ip inspect myfw in

2 REPLIES
Anonymous
N/A

Re: IOS FW: http urlfilter and Squid??

i think n2h2 prots are propritary. So the best way is to use IOS's wccp features to utilise squid as an indirect proxy, then you can use squid filtering/ACL etc facilities to control access

New Member

Re: IOS FW: http urlfilter and Squid??

Thanks for the reply. I checked into wccp but it appears that will not work. We're trying to implement this on the Cisco 827 series routers, which do not support WCCP, but do support urlfiltering.

Is anyone aware of any other solutions??

160
Views
0
Helpful
2
Replies