Hi folks. I am new to Cisco products and there are a few things I am trying ot configure. I am running a 2821 Router with IOS v 12.4(10a). I am trying to configure the URL filtering portion of the firewall ACL. I have configured to deny one site, then I enable the filter and it shuts down all internet sites. When I disable the URL filtering, everything works fine again. This looks pretty cut and dry but apparently it is not. I was also reading that I needed a websense server to use this feature? Is that correct? Thanks.
URL Filtering WITHOUT Websense??
Jan 03, 2007
5 Replies
post what you have done. AFAIK the built-in filter is useful if you want to manage short lists of what to allow or deny. For more accurate management you need an external server.
HTH Alex
Hi Alex,
Yes I am only interested in blocking short lists. I am using the GUI interface to configure since I do not know the commands or how to use them yet. I have a training next week which will hopefully help out with that. Anyway, this is what I did:
- Logged into the router via web browser
- Clicked COnfigure at the top of the window
- Went to Firewall and ACL.
- Clicked on Application Security Tab
- Clicked on URL Filtering
- Checked Enable URL Filtering box.
- Clicked Add URL
- Entered formatting link(for testing).
- Clicked Deny radio button.
- Clicked Okay - formatting linkshows up in list
- Clicked Apply Changes.
After I do that I get the message "To enable URL Filtering, configure "any any" ACL for the Java Applet scanner to avoid performance issue." which I ignored and clicked OK. The commands are successfully delivered to router. After I do that, ALL websites give me the forbidden message. Any help would be appreciated. Thanks!
AM wrote:
to allow or deny. For more accurate
Hi Alex,
Yes I am only interested in blocking short lists. I am using the GUI interface to configure since I do not know the commands or how to use them yet. I have a training next week which will hopefully help out with that. Anyway, this is what I did:
- Logged into the router via web browser
- Clicked COnfigure at the top of the window
- Went to Firewall and ACL.
- Clicked on Application Security Tab
- Clicked on URL Filtering
- Checked Enable URL Filtering box.
- Clicked Add URL
- Entered formatting link(for testing).
- Clicked Deny radio button.
- Clicked Okay - formatting linkshows up in list
- Clicked Apply Changes.
After I do that I get the message "To enable URL Filtering, configure "any any" ACL for the Java Applet scanner to avoid performance issue." which I ignored and clicked OK. The commands are successfully delivered to router. After I do that, ALL websites give me the forbidden message. Any help would be appreciated. Thanks!
AM wrote:
to allow or deny. For more accurate
I guees that like the ACL config guidelines, you have to permit SOMETHING in a filter, as there are a implict deny any at the end of any filter.
So try to deny google, and then permit any.
HTH Martin
It's rule for ALL Access-Lists - there is implicit "deny all" at the end of EVERY access-list (even though it's not shown in the config). It means that everything "not permitted" by an access-list will be dropped by default. So, you have to enable "everything else" at the end of access-list.
Good luck,
Mike
Join the Discussion
Have something to add? Share your thoughts — no account required.
Didn't find your answer?
Ask the community — no account required