3

NOTE: seems while this config was upto date when I wrote this answer, it hasn't since been updated. It took me awhile to figure this out, as in the ASA mode (accessed via system support diagnostic-cli) doesn't give you any way to copy (via tftp, scp etc) which you'd normally use to make this kind of backup of the config. Instead of the diagnostic-cli, go ...


2

Your question is how to configure the Sourcefire IPS via the Sourfire Management Center to block certain sites. URL Filtering on a FireSIGHT System Configuration Example Exclusion of a Specific Site from Blocked URL Category FireSIGHT Management Center does not allow you to have a local rating of URLs that override the default Sourcefire provided category ...


2

With FP setup as Inline you need two interfaces, one inbound and one outbound. Proxy traffic example Flow of traffic would be User>Internal Proxy Server inside interface>external Proxy Outside interface>cable from proxy external interface connects directly to FP Port 1>FP port 2 outbound connects to switch on same vlan as Proxy> traffic then routes to the ...


1

On an ASA, you can block individual URLs in two different ways. The first way is using FQDN, which basically causes the ASA to resolve the hostname in DNS on a scheduled basis and update the ACL with the results of the lookup. So you create an ACL entry the denies traffic to the FQDN, and it will be updated with the DNS answers all the time. The second way ...


Only top voted, non community-wiki answers of a minimum length are eligible