Re: How I could block fracebook through a Cisco router with

From: Petr Lapukhov <petr_at_internetworkexpert.com>
Date: Thu, 14 Jan 2010 10:14:40 -0800

Hi,

If your IOS is up to date enough to support latest IOS ZBFW features
you may want to use local URL filtering (as opposed to using Websense
server). NIL has a nice writeup on that

http://wiki.nil.com/Local_Content_Filtering_in_Cisco_IOS

This is supposed to be more more flexible than NBAR-based filtering,
and apparently more stable (as it uses the same code as Websense
integration, which *hopefully* targets larger deployments).
Personally, I recall having so many weird issues with NBAR
classification :)

HTH

-- 
Petr Lapukhov, petr_at_INE.com
CCIE #16379 (R&S/Security/SP/Voice)
Internetwork Expert, Inc.
http://www.INE.com
Toll Free: 877-224-8987
Outside US: 775-826-4344
2010/1/14 CCIE <ccie_at_axizo.com>:
> Hi expert,
>
> How I could block fracebook through a Cisco router with advanced IP security
> services?
>
> Regards,
>
> Amin
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net
Received on Thu Jan 14 2010 - 10:14:40 ART

This archive was generated by hypermail 2.2.0 : Thu Feb 04 2010 - 20:28:41 ART