Solved

Content Filtering in PIX/ASA Firewall

Posted on 2011-09-14
3
600 Views
Last Modified: 2012-06-21
Hi,

What is Content Filtering subject and How to do in PIX/ASA/Router.

Will PIX 515E/ Cisco Routers supports Content Filtering

Regards
Ramu
0
Comment
Question by:RAMU CH
3 Comments
 
LVL 17

Accepted Solution

by:
Garry-G earned 250 total points
ID: 36541097
PIX does not do any content filtering, nor does the ASA 5505.
Content filtering is only possible by adding the CSC card to an ASA 5510 or larger. If you do, you can do content filtering (Antivirus/Malware, keywords etc.). By adding the CSC Plus license, you also get the ability to filter based on website/URL categories, and do Spam filtering for mail transfer.
For IOS routers, there is limited Content Filtering available, but not to the extent and throughput as the CSC can.
As for the CSC performance, lacking official numbers from Cisco, please note that the CSC10 (in our experience) has not been close to keeping up with a 34M line ...
0
 
LVL 35

Assisted Solution

by:Ernie Beek
Ernie Beek earned 250 total points
ID: 36541228
Well you can do some basic content filtering using regular expressions. Have a look at:http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080940c5a.shtml

Keep in mind though you can't filter https URL's, even with the CSC module.
0
 
LVL 1

Author Closing Comment

by:RAMU CH
ID: 36890449
Tks
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

If you have an ASA5510 then this sort of thing would be better handled with a CSC Module, however on an ASA5505 thats not an option, and if you want to throw in a quick solution to stop your staff going to facebook during work time, then this is the…
Shadow IT is coming out of the shadows as more businesses are choosing cloud-based applications. It is now a multi-cloud world for most organizations. Simultaneously, most businesses have yet to consolidate with one cloud provider or define an offic…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question