Hello Yusef, I just labbed this up and these are the results :
1) If you read Kings's mail, you will find that only the "absolute URI" will contain the full path -> "www.youtube.com/video1.html" 2) Also, if it's not an absolute URI, then the URI field will only contact "/video1.html". The HOST field is used to identify the host. I found that the GET requests from an IOS router following the "non-absolute URI" method. So if you want to block all traffic to www.youtube.com, you must do this by matching the regex against the host field ex: *regex youtube youtube\.com* * * *class-map type inspection http YOUTUBE* *match request header host regex youtube* Hope this helps! Cheers, TacACK
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
