Denying outbound internet access

[rtiv]

Hi,

I have a request to deny a user internet access from her PC. I'm running a PIX520 with 5 interfaces configured:

0=outside
1=inside
2=dmz
3=ras
4=vpn

I have the IP address of the client which I need to forbid outgoing internet access...what would the command be ?

Thanks

 

[gbiello]

Try this:
access-list intoout deny tcp host w.x.y.z any eq www
access-list intoout permit ip any any
access-group intoout in interface inside

This will deny any web traffic from that host through the firewall.

-gbiello