Yes you can. With regards Kings
On Wed, Nov 10, 2010 at 10:59 PM, Mark Senteza <[email protected]>wrote: > Thanks all, > > that definitely clears up things for me. > > Kings - so I can go ahead and set up URL Filtering using white & black > lists without a Websense server ? I'll go ahead and test that for my own > verification. > > Thanks again > > Mark > > > On Tue, Nov 9, 2010 at 9:23 PM, Kingsley Charles < > [email protected]> wrote: > >> If you don't have an URL filter like Websense or N2H2, then you can >> configure a local black and white list of URLs. >> >> White list - Permit the URLs >> Black list - Deny the URLs >> >> If you have URL filter server configured, the URLs that you configure in >> the local list are never sent to URL server for validation. >> >> In CBAC, you use the following command to configure. >> >> *ip urlfilter exclusive-domain* >> >> With regards >> Kings >> >> On Wed, Nov 10, 2010 at 10:21 AM, Vybhav Ramachandran >> <[email protected]>wrote: >> >>> Hello Mark, >>> >>> My understanding is as follows : >>> >>> By entering the "exclusive-domain" keyword, you are instructing the >>> Router not the send url-filter requests to the url-filtering server. >>> However, to instruct the router to permit/block these sites , we have the >>> "permit/deny" keywords. >>> >>> Ex: Suppose i want to allow everyone going to google.com to bypass the >>> urlfiltering policy. I would issue this >>> >>> #exclusive-domain *permit *cisco.com >>> >>> Suppose i wanted to EXPLICITLY block all traffic going to twitter.com ( >>> i.e i don't want the request to go to the Url-filtering server , but i still >>> want to deny it. I'd use >>> >>> #exclusive-domain *deny *twitter.com >>> >>> All other url's will be sent to the URL-filtering server, which decides >>> it's fate. >>> >>> Cheers, >>> TacACK >>> >>> _______________________________________________ >>> For more information regarding industry leading CCIE Lab training, please >>> visit www.ipexpert.com >>> >>> >> >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
