Re: How I could block fracebook through a Cisco router with

Also watch your counters. I have a client running this with NBAR and IOS
Firewall and for what ever reason about every 4 - 5 days the router stops
passing traffic in from and to the internet. If we reboot the router it fixes
it, or if we do clear counters. The clear counters works for alittle while but
then we end up having to reboot anyways by the end of the day. I know it
doesnt make 100% sense, we had Cisco looking into it for a long time now and
they cant figure it out, but just and FYI in case.

-----Original Message-----
From: Nish Vamadevan <ipnish_at_gmail.com>
To: Iwan Hoogendoorn <iwan_at_ipexpert.com>; CCIE <ccie_at_axizo.com>
Cc: groupstudy <ccielab_at_groupstudy.com>
Sent: Thu, Jan 14, 2010 9:54 am
Subject: Re: How I could block fracebook through a Cisco router with advanced
IP security services?

I would keep an eye on the CPU usage though...

------Original Message------
From: Iwan Hoogendoorn
Sender: nobody_at_groupstudy.com
To: CCIE
Cc: groupstudy
ReplyTo: Iwan Hoogendoorn
Subject: Re: How I could block fracebook through a Cisco router with advanced
IP security services?
Sent: 14 Jan 2010 17:50

NBAR with url maching would be your best option ....
Or find out the facebook IP range and block that ?

On Thu, Jan 14, 2010 at 9:33 AM, CCIE <ccie_at_axizo.com> wrote:
> Hi expert,
>
> How I could block fracebook through a Cisco router with advanced IP
security
> services?
>
> Regards,
>
> Amin
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

--
Regards,
Iwan Hoogendoorn
CCIE #13084 (R&S / Security / SP)
Sr. Support Engineer  IPexpert, Inc.
URL: http://www.IPexpert.com
Blogs and organic groups at http://www.ccie.net