[c-nsp] How to prevent https facebook from the cisco router 1841

Kirill Bychkov kirill.bychkov at gmail.com
Thu Nov 14 00:10:50 EST 2013


In the comments to Curtis link:
"HI, i used that config and it worked well, but if you want to block a
website that the addreses starts with "HTTPS"  (secure) does't block them..
do you have a solution for that?"
For block HTTPS use proxy with your PKI, because HTTPS packet with URL from
USER to SERVER must be decrypted.


On 14 November 2013 08:08, Curtis LaMasters <curtislamasters at gmail.com>wrote:

> This is the best option I have found for needs in the past.
> https://supportforums.cisco.com/docs/DOC-23236
>
> Curtis LaMasters
> http://www.curtis-lamasters.com
> http://www.builtnetworks.com
>
>
> On Wed, Nov 13, 2013 at 9:58 PM, mohamed nagy <eng.mohamednagy at gmail.com
> >wrote:
>
> > Hello ,
> >
> > i need to prevent users to open Facebook https traffic from my router
> cisco
> > 1841
> >
> > i can put it as ip but is there any thing else because the ip way not
> > efficient
> >
> > What is the best scenario for that ??
> > _______________________________________________
> > cisco-nsp mailing list  cisco-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
> >
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>


More information about the cisco-nsp mailing list