Syntax for- Filter URL except

[Whitemtntn]

Integrating Websense with our PIX 515e(ver 8.0)
and I have a syntax question for the "filter url except" command

I am attempting to create an exception on the PIX for a range of IP addresses. (for our servers and printers)

I understand that I can create an exception for one IP address with the following command:

filter url except 10.1.1.1 255.255.255.255

I do not see how to do this for a RANGE of ip addresses.
For instance, this command doesn’t work:
filter url except 10.1.1.1-10.1.1.33 255.255.255.255

If this is possible, please let me know the proper syntax, appreciate the help.

 

[North323]

i have never done the range like that. you can try this as a possible work around?

try
filter url except 10.1.1.1 255.255.255.224 0.0.0.0 0.0.0.0

this subnet covers .1 - .30
then add seperate exceptins for the remainder

 

[Whitemtntn]

That's an interesting thought.. Hard to believe you can't do a range.

 

[North323]

didnt say it cant be done..ive never done it that way

 

[Whitemtntn]

North..
Actually, I believe your suggestion is the only way to do it, aside from making one entry at a time for each IP address.

 

[unclerico]

Yes, as north said and as you concurred, using a wildcard mask is what you need to do.

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[baddos]

No range only subnet mask grouping.

If you have a layer3 switch, I would recommend putting your servers in it's own subnet on a different vlan.