networking-forum.com
Community Blog • Community Wiki * Register  * Search  * Login
View unanswered posts • View active topics

Board index » Cisco Networking » Cisco Security

All times are UTC - 6 hours [ DST ]


Post new topic Reply to topic  Page 1 of 1
  [ 12 posts ] 
  Print view Previous topic | Next topic 
Author Message
yadhutony
PostPosted: Tue Jul 17, 2012 12:09 am 
Offline
New Member
New Member

Joined: Mon Jul 09, 2012 6:58 am
Posts: 31
Hi
I have created a zone based firewall and restricted majority of users from accessing internet and allowed a few users to have full internet access.
Now few of my restricted users need to access some particular websites. But when i tried to give access using the ip address of the website it seems to be working for only few sites since some websites have got numerous ip addresses. How will i give access to some sites like google.com using domain name in ZBF?

Thanks in advance.
Regards,
Tony

_________________
http://yadhutony.blogspot.com
Top
 Profile  
 
mellowd
PostPosted: Tue Jul 17, 2012 1:29 am 
Online
CCIE #38070
CCIE #38070
User avatar

Joined: Wed Jun 18, 2008 7:49 am
Posts: 12430
Location: London, UK
Certs: CCIE ,CC-NP/IP, JNCIP-SP, JNCIS-ENT, BC-/SPNE/NP
WHY CAPS???

_________________
www.mellowd.co.uk/ccie/
Top
 Profile  
 
Project2501
PostPosted: Tue Jul 17, 2012 1:36 am 
Offline
Post Whore
Post Whore
User avatar

Joined: Thu Apr 17, 2008 6:44 pm
Posts: 6049
Location: Perth, WA
Certs: CCNA
I'm kind of disappointed the body of the post wasn't in caps.

And yet interested to see the outcome of this.

_________________
- Pete
Top
 Profile  
 
Reggle
PostPosted: Tue Jul 17, 2012 3:41 am 
Offline
Post Whore
Post Whore

Joined: Sun May 15, 2011 4:16 pm
Posts: 1423
Location: Belgium
Certs: CCNA Security, CCNP
http://networketiquette.net/

_________________
http://reggle.wordpress.com
Top
 Profile  
 
yadhutony
PostPosted: Tue Jul 17, 2012 5:40 am 
Offline
New Member
New Member

Joined: Mon Jul 09, 2012 6:58 am
Posts: 31
I do apologize very sincerely for the mistakes I have made. Can anyone please help me out over here?

_________________
http://yadhutony.blogspot.com
Top
 Profile  
 
Reggle
PostPosted: Tue Jul 17, 2012 6:23 am 
Offline
Post Whore
Post Whore

Joined: Sun May 15, 2011 4:16 pm
Posts: 1423
Location: Belgium
Certs: CCNA Security, CCNP
Unfortunately I'm not sure how to do that, but wasn't it something like the 'server name' command?

_________________
http://reggle.wordpress.com
Top
 Profile  
 
DanC
PostPosted: Tue Jul 17, 2012 6:56 am 
Offline
Ultimate Member
Ultimate Member
User avatar

Joined: Mon Oct 06, 2008 8:01 am
Posts: 669
Certs: CCNA,CCNP
Take a look at this:

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00808bc994.shtml
Top
 Profile  
 
yadhutony
PostPosted: Tue Jul 17, 2012 7:08 am 
Offline
New Member
New Member

Joined: Mon Jul 09, 2012 6:58 am
Posts: 31
DanC wrote:
Take a look at this:

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00808bc994.shtml


Hi,
I configured the zone based firewall by referring the same document. My requirement is to allow google to some particular IP's in my network. How will I do it using the ACL in zone based firewall? If I put the url in the configuration it resolves to only a single IP.

Regards,
Tony

_________________
http://yadhutony.blogspot.com
Top
 Profile  
 
michoudi
PostPosted: Tue Jul 17, 2012 8:20 am 
Online
Senior Member
Senior Member

Joined: Wed Sep 01, 2010 9:46 pm
Posts: 357
Location: USA
Certs: CCNA, 642-642, 642-627
yadhutony wrote:
DanC wrote:
Take a look at this:

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00808bc994.shtml


Hi,
I configured the zone based firewall by referring the same document. My requirement is to allow google to some particular IP's in my network. How will I do it using the ACL in zone based firewall? If I put the url in the configuration it resolves to only a single IP.

Regards,
Tony


A domain name will only resolve to a single IP at any given time. What I want to know is what good is a google search if the search results are blocked by your firewall?
Top
 Profile  
 
yadhutony
PostPosted: Tue Jul 17, 2012 11:44 pm 
Offline
New Member
New Member

Joined: Mon Jul 09, 2012 6:58 am
Posts: 31
michoudi wrote:
yadhutony wrote:
DanC wrote:
Take a look at this:

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00808bc994.shtml


Hi,
I configured the zone based firewall by referring the same document. My requirement is to allow google to some particular IP's in my network. How will I do it using the ACL in zone based firewall? If I put the url in the configuration it resolves to only a single IP.

Regards,
Tony


A domain name will only resolve to a single IP at any given time. What I want to know is what good is a google search if the search results are blocked by your firewall?[/quo
Could you please tell me how will i allow Gmail to some particular users? If I put the url in the configuration it resolves to only a single IP.

_________________
http://yadhutony.blogspot.com
Top
 Profile  
 
mellowd
PostPosted: Wed Jul 18, 2012 1:24 am 
Online
CCIE #38070
CCIE #38070
User avatar

Joined: Wed Jun 18, 2008 7:49 am
Posts: 12430
Location: London, UK
Certs: CCIE ,CC-NP/IP, JNCIP-SP, JNCIS-ENT, BC-/SPNE/NP
Why not use a proxy?

_________________
www.mellowd.co.uk/ccie/
Top
 Profile  
 
yadhutony
PostPosted: Wed Jul 18, 2012 1:48 am 
Offline
New Member
New Member

Joined: Mon Jul 09, 2012 6:58 am
Posts: 31
Please check the link https://supportforums.cisco.com/docs/DOC-17014.
Even I feel proxy is the best method to solve this. Thank you for your replies.

_________________
http://yadhutony.blogspot.com
Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 1 of 1
  [ 12 posts ] 

Board index » Cisco Networking » Cisco Security

All times are UTC - 6 hours [ DST ]

Who is online

Users browsing this forum: cjutting, haluo, ncdec and 22 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group