Hi,
If your IOS is up to date enough to support latest IOS ZBFW features
you may want to use local URL filtering (as opposed to using Websense
server). NIL has a nice writeup on that
http://wiki.nil.com/Local_Content_Filtering_in_Cisco_IOS
This is supposed to be more more flexible than NBAR-based filtering,
and apparently more stable (as it uses the same code as Websense
integration, which *hopefully* targets larger deployments).
Personally, I recall having so many weird issues with NBAR
classification :)
HTH
-- Petr Lapukhov, petr_at_INE.com CCIE #16379 (R&S/Security/SP/Voice) Internetwork Expert, Inc. http://www.INE.com Toll Free: 877-224-8987 Outside US: 775-826-4344 2010/1/14 CCIE <ccie_at_axizo.com>: > Hi expert, > > How I could block fracebook through a Cisco router with advanced IP security > services? > > Regards, > > Amin > > > Blogs and organic groups at http://www.ccie.net > > _______________________________________________________________________ > Subscription information may be found at: > http://www.groupstudy.com/list/CCIELab.html Blogs and organic groups at http://www.ccie.netReceived on Thu Jan 14 2010 - 10:14:40 ART
This archive was generated by hypermail 2.2.0 : Thu Feb 04 2010 - 20:28:41 ART