i have to match website www.google.com and ensure that inside users cannot open google.com page due to certain 0-day exploit ! well , in order to do so, ASA is configured accordingly . Here i wanted to know something as per below comments and syntax:
As you all know that ASA gives us two options to configure regex, please confirm would both of them serve the same logic in configuration or not ? OPTION A : ======== i have given statement in config mode. regex GOOGLE "google\.com" a>First i make up a REGEX class ! class-map type regex match-any GOOGLE101 match regex GOOGLE b> Second i make HTTP Inspect Class and call REGEX Class in it !!! class-map type inspect http match-any BLOCK-GOOGLE match request uri regex class GOOGLE101 OPTION B: ======== regex GOOGLE "google\.com" a> class-map type inspect http match-any TRUE match request uri regex GOOGLE Note ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [ Does Option A and Option B serve the same purpose and logic !!! ]
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
