42-4
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter42 Configuring Filtering Services
Filtering URLs and FTP Requests with an External Server
Enter the number of seconds after which the request to the URL filtering server times out. The
default is 30 seconds.
In the Protocol area, to specify which TCP version to use to communicate with the URL filtering
server, click one of the following radio buttons:
TCP 1
TCP 4
UDP 4
Enter the maximum number of TCP connections allowed for communicating with the URL filtering
server, and click OK.
The new Websense URL filtering server properties appear in the URL Filtering Servers pane. To change
these properties, click Edit. To add more Websense URL filtering servers after you have added the first
Websense URL filtering server, click Add or Insert. To remove a Websense URL filtering server, click
Delete.
If you chose the Secure Computing SmartFilter URL Filtering option, the Add Parameters for Secure
Computing SmartFilter URL Filtering dialog box appears.
Choose the interface on which the URL filtering server is connected from the drop-down list.
Enter the IP address of the URL filtering server.
Enter the number of seconds after which the request to the URL filtering server times out. The
default is 30 seconds.
In the Protocol area, to specify which protocol type to use to communicate with the URL filtering
server, click one of the following radio buttons:
TCP
UDP
Enter the maximum number of TCP connections allowed for communicating with the URL filtering
server, and click OK.
The new Secure Computing SmartFilter URL filtering server properties appear in the URL Filtering
Servers pane. To change these properties, click Edit. To add more Secure Computing SmartFilter URL
filtering servers after you have defined the first Secure Computing SmartFilter URL filtering server,
click Add or Insert. To remove a Secure Computing SmartFilter URL filtering server, click Delete.
Configuring Additional URL Filtering Settings
After you have accessed a website, the filtering server can allow the ASA to cache the server address for
a certain period of time, as long as each website hosted at the address is in a category that is permitted
at all times. When you access the server again, or if another user accesses the server, the ASA does not
need to consult the filtering server again to obtain the server address.
Note Requests for cached IP addresses are not passed to the filtering server and are not logged.
As a result, this activity does not appear in any reports.
This section describes how to configure additional URL filtering settings and includes the following
topics: