Simple Local URL filtering

Hi All,

Very simple Local URL filtering by using CBAC.

ip inspect name SDM_LOW http urlfilter

ip urlfilter allow-mode on
ip urlfilter exclusive-domain deny .bypassthat.com
ip urlfilter exclusive-domain deny .megaupload.com
ip urlfilter exclusive-domain deny .facebook.com

interface fastethernet0/0
description *** Connected to Outside ***
ip inspect SDM_LOW out

Slow HTTP download.

Hi All,

I came into problem whereby if enable specific HTTP inspection, my http download speed started with fast > Slower > stop..... In another word, none of the download have success. I have puzzling around what could be problem. Changed my Router, Changed my Load Balancer. No improvement.

End up reconfiguring my router. And then.... with initial configuration (interface IP, Routing, NAT, access-list).. I tried download again... booomm.. successful. Constant download speed. Then applied my Inspection rule, and tried download again, the earlier problem came up again. The problem was caused by specific HTTP inspection command, and I replaced it with just common protocol inspection (TCP,UDP,ICMP, ISAKMP).. and the problem SOLVED....

So watch out guys if you had similar problem and the best way is to move forward to ZONE Based Firewall Policy...