<div>
Thanks for your response.<br />
<br />
regards
</div>


<div>
<div class="content wysiwyg-content">
We have a requirement for a WSUS server to receive updates which sits behind a ASA5505. &nbsp;I understand to enable this to happen the WSUS server needs to communicate with many DNS names and therefore there are many potential IP addresses/ranges that the ASA needs to apply the appropriate security policy too. An example of just a few of the DNS names we need to apply a security policy to are <a href="http://windowsupdate.microsoft.com" rel="ugc nofollow">http://windowsupdate.microsoft.com</a>, <a href="http://*.windowsupdate.microsoft.com" rel="ugc">http://*.windowsupdate.microsoft.com</a>, <a href="https://*.windowsupdate.microsoft.com" rel="ugc">https://*.windowsupdate.microsoft.com</a>&nbsp;etc etc....<br />
<br />
Is it possible to apply a security policy based on domain names as apposed to IP address/ranges on a ASA5505?<br />
<br />
regards<br />

</div>
</div>


We have a requirement for a WSUS server to receive updates which sits behind a ASA5505.  I understand to enable this to happen the WSUS server needs to communicate with many DNS names and therefore there are many potential IP addresses/ranges that the ASA needs to apply the appropriate security policy too. An example of just a few of the DNS names we need to apply a security policy to are http://windowsupdate.microsoft.com, http://*.windowsupdate.microsoft.com, https://*.windowsupdate.microsoft.com etc etc....

Is it possible to apply a security policy based on domain names as apposed to IP address/ranges on a ASA5505?

regards


update wsus server via asa 5505 using domain names?

Operating system security (OS security) is the process of ensuring OS integrity, confidentiality and availability. OS security refers to specified steps or measures used to protect the OS from threats, viruses, worms, malware or remote hacker intrusions. OS security encompasses all preventive-control techniques, which safeguard any computer assets capable of being stolen, edited or deleted if OS security is compromised, including authentication, passwords and threats to systems and programs.

OS Security

Cisco PIX is a dedicated hardware firewall appliance; the Cisco Adaptive Security Appliance (ASA) is a firewall and anti-malware security appliance that provides unified threat management and protection the PIX does not. Other Cisco devices and systems include routers, switches, storage networking, wireless and the software and hardware for PIX Firewall Manager (PFM), PIX Device Manager (PDM) and Adaptive Security Device Manager (ASDM).

Cisco

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.