Yeah, Its starts at version 6.2. Its great, drastically reduces your config lines..
>From: "Andrew Larkins" >Reply-To: "Andrew Larkins" >To: [EMAIL PROTECTED] >Subject: RE: Resricicting Certain Users -Pix 515 UR [7:58861] >Date: Wed, 11 Dec 2002 16:32:13 GMT > >Maybe a dumb question - but is there a certain software version for that >command (object group) - haven't seen it before > >-----Original Message----- >From: Kevin O'Gilvie [mailto:[EMAIL PROTECTED]] >Sent: 10 December 2002 22:15 >To: [EMAIL PROTECTED] >Subject: Re: Resricicting Certain Users -Pix 515 UR [7:58861] > > >Sounds good.. >But websense is very expensive.. >Wont lists do the job as well: e.g > >object-group network REST-LAN-USR > network-object 10.1.x.x 255.255.255.0 >object-group network Rest-SRV > network-object host 64.232.56.99 > network-object host 209.123.45.67 > >access-list RESTRICTED permit tcp object-group REST-LAN-USR object-group >Rest-SRV eq www > >And just put those users in that subnet? > >Thanks Brad > > > > > > > >From: "Brad" > >Reply-To: "Brad" > >To: [EMAIL PROTECTED] > >Subject: Re: Resricicting Certain Users -Pix 515 UR [7:58861] > >Date: Tue, 10 Dec 2002 15:42:54 GMT > > > >Kevin, > > > >Hi! I would say the best way to do something like this would probably be > >using Websense (or similar software) in conjunction with your Pix. I've > >setup Websense before, and it's pretty easy. > > > >thanks, > >-Brad Ellis > >CCIE#5796 (R&S / Security) > >Network Learning Inc > >[EMAIL PROTECTED] > >www.optsys.net (Cisco hardware) > > > >""Kevin O'Gilvie"" wrote in message > >[EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > Hi All, > > > > > > I would like to create a group lets say x,x,x,x-x.x.x.x and restrict > >them > >to > > > only certain websites, I am guessing I will have to use ip addresses >of > > > those sites, but still allow them to access the local network.. > > > Whats the best way to go about this. > > > I have been using groups in my configs thus far.. > > > > > > BTW- I love you guys in this group, it has to be the best news group > >around > > > right now, lets keep the standards high and weed out the slackers that > >are > > > trying to water down the CCIE's. We are doing more work for less money > >and > > > the main reason why is because we are settling, we work damn hard and > >invest > > > time and money to achieve these goals, and should be awarded as such. >I > >dont > > > see doctors building practice labs in there homes to cure patients, >nor > > > lawyers building practice court rooms.. > > > > > > Sorry for the ranting but every year it seems you have to have more >and > >more > > > letters after your name to earn a decent living in this technology > >arena, > > > when we are the ones that are enabling these million and billion >dollar > > > companies to do business seemlessly anytime and anywhere.. > > > > > > -Kevin > > > > > > _________________________________________________________________ > > > The new MSN 8: smart spam protection and 2 months FREE* > > > http://join.msn.com/?page=features/junkmail >_________________________________________________________________ >Add photos to your messages with MSN 8. Get 2 months FREE*. >http://join.msn.com/?page=features/featuredemail _________________________________________________________________ Add photos to your messages with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=58992&t=58861 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
