Cisco ASA URL过滤配置

1、Cisco ASA URL过滤配置此文档为cisco ASA 5520过滤一些视频网站的配置命令。1、创建一个访问列表，指定需要对其进行URL过滤的流量access-list URL_filter extended permit ip any any2、创建一个类映射匹配之前创建的访问列表class-map URL_filter_mapmatch access-list URL_filterexit3、创建正则表达式指定需要过滤的URLregex tudou "."regex youku "."regex xiaone

2、i "."regex mop "."regex pps ".pps.tv"regex iqiyi "."regex tv_people ""regex tv_sohu ""regex video_sina ""regex qiyi "."regex baofeng ".b

3、"regex ku6 "."regex kaixin001 "."regex movie_xunlei "."regex kankan "."regex funshion "."4、创建类映射，匹配正则表达式所定义的关键字的所有URL。class type regex match-any URL_filter_match_regexmatch regex tudo

4、umatch regex youkumatch regex xiaoneimatch regex mopmatch regex ppsmatch regex iqiyimatch regex tv_peoplematch regex tv_sohumatch regex video_sinamatch regex qiyimatch regex baofengmatch regex ku6match regex kaixin001match regex movie_xunleimatch regex kankanmatch regex funshionexit5、创建类型为检察HTTP的类映射

5、，指定检察类映射URL_filter_match_regex所有的URLclass type inspect http URL_filter_inspectmatch request header host regex class URL_filter_match_regexexit6、创建策略映射，类型为检察HTTP，匹配URL_filter_inspect，并且指定处理方法。policy-map type inspect http URL_filter_policy1class URL_filter_inspectdrop-connection logexit7、创建策略映射，指定源、目标

6、及处理方法。policy-map URL_filter_policy2class URL_filter_mapinspect http URL_filter_policy1exitexit8、将策略映射应用到接口。service-policy URL_filter_policy2 interface inside附：完整的配置命令（可直接在全局模式下往设备里面粘贴）access-list URL_filter extended permit ip any anyclass-map URL_filter_mapmatch access-list URL_filterexitregex tudou

7、 "."regex youku "."regex xiaonei "."regex mop "."regex pps ".pps.tv"regex iqiyi "."regex tv_people ""regex tv_sohu ""regex video_sina "video.si

8、"regex qiyi "."regex baofeng "."regex ku6 "."regex kaixin001 "."regex movie_xunlei "."regex kankan "."regex funshion "."class type regex match-an

9、y URL_filter_match_regexmatch regex tudoumatch regex youkumatch regex xiaoneimatch regex mopmatch regex ppsmatch regex iqiyimatch regex tv_peoplematch regex tv_sohumatch regex video_sinamatch regex qiyimatch regex baofengmatch regex ku6match regex kaixin001match regex movie_xunleimatch regex kankanmatch regex funshionexitclass type inspect http URL_filter_inspectmatch request header host regex class URL_filter_match_regexexitpolicy-map type inspect http URL_filter_policy1class URL_filter_inspectdrop-con