OutBound URL and Port Restriction

[jvw822]

We would like to restrict outbound access on our PIX 515, ver 5.2(1).

Is there a way to url filter outbound traffic...without using Websense, my company does not want to pay for it.

Is there an easier way to restrict outbound ports..than using access lists..?

Thanks.

 

[berford]

You can do this level of filtering using ACLs but it requires a little bit of work. Using PDM in 6.0 you can either define the domain you want to block as a network and then create an ACL using that network object. Or you can resolve the URL to an IP address or range and then create a ACL that will block that address / range.

 

[berford]

Other companies to check out include:

http://www.n2h2.com/

http://www.stbernard.com/

and

http://www.surfcontrol.com/

but the level of integration varies.

 

[sh0x]

Use the 'outbound' command as detailed on Cisco's website:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_60/config/commands.htm#xtocid358447

Jason Long