Thanks all, that definitely clears up things for me.
Kings - so I can go ahead and set up URL Filtering using white & black lists without a Websense server ? I'll go ahead and test that for my own verification. Thanks again Mark On Tue, Nov 9, 2010 at 9:23 PM, Kingsley Charles <[email protected] > wrote: > If you don't have an URL filter like Websense or N2H2, then you can > configure a local black and white list of URLs. > > White list - Permit the URLs > Black list - Deny the URLs > > If you have URL filter server configured, the URLs that you configure in > the local list are never sent to URL server for validation. > > In CBAC, you use the following command to configure. > > *ip urlfilter exclusive-domain* > > With regards > Kings > > On Wed, Nov 10, 2010 at 10:21 AM, Vybhav Ramachandran > <[email protected]>wrote: > >> Hello Mark, >> >> My understanding is as follows : >> >> By entering the "exclusive-domain" keyword, you are instructing the Router >> not the send url-filter requests to the url-filtering server. However, to >> instruct the router to permit/block these sites , we have the "permit/deny" >> keywords. >> >> Ex: Suppose i want to allow everyone going to google.com to bypass the >> urlfiltering policy. I would issue this >> >> #exclusive-domain *permit *cisco.com >> >> Suppose i wanted to EXPLICITLY block all traffic going to twitter.com ( >> i.e i don't want the request to go to the Url-filtering server , but i still >> want to deny it. I'd use >> >> #exclusive-domain *deny *twitter.com >> >> All other url's will be sent to the URL-filtering server, which decides >> it's fate. >> >> Cheers, >> TacACK >> >> _______________________________________________ >> For more information regarding industry leading CCIE Lab training, please >> visit www.ipexpert.com >> >> >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
