If you don't have an URL filter like Websense or N2H2, then you can
configure a local black and white list of URLs.

White list - Permit the URLs
Black list - Deny the URLs

If you have URL filter server configured, the URLs that you configure in the
local list are never sent to URL server for validation.

In CBAC, you use the following command to configure.

*ip urlfilter exclusive-domain*

With regards
Kings

On Wed, Nov 10, 2010 at 10:21 AM, Vybhav Ramachandran <[email protected]>wrote:

> Hello Mark,
>
> My understanding is as follows :
>
> By entering the "exclusive-domain" keyword, you are instructing the Router
> not the send url-filter requests to the url-filtering server. However, to
> instruct the router to permit/block these sites , we have the "permit/deny"
> keywords.
>
> Ex: Suppose i want to allow  everyone going to google.com to bypass the
> urlfiltering policy. I would issue this
>
> #exclusive-domain *permit *cisco.com
>
> Suppose i wanted to EXPLICITLY block all traffic going to twitter.com (
> i.e i don't want the request to go to the Url-filtering server , but i still
> want to deny it. I'd use
>
> #exclusive-domain *deny *twitter.com
>
> All other url's will be sent to the URL-filtering server, which decides
> it's fate.
>
> Cheers,
> TacACK
>
> _______________________________________________
> For more information regarding industry leading CCIE Lab training, please
> visit www.ipexpert.com
>
>
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Reply via email to