Blocking Websites using ACL or CBAC

[skk391]

Hi All,

I have configured CBAC on my dialler1 interface in the OUT direction.

So this will allow clients on the inside to access the web as long as the connection is initiated from the inside. How would I go about blocking certain websites. I would I have to write a separate ACL? What would be the prefers if both ACL and CBAC is configured on the same interface?

I have read about the config t- ip urlfilter exclusive-domain but am unsure if this would be suitable.

I looking to set something up so that I have a list of banned sites then I can tell the ACL or CBAC to referred to the banned site list before allowing connection out to the web. I havent got websense or anthing like that.

Thanks

 

[Rouky]

You can take a look around "urlfilter", or using Squid (proxy server) with WCCP.