topic Re: Block DMZ specific URL in General Topics

Block DMZ specific URL

BSadozai — Tue, 11 Dec 2012 10:25:48 GMT

Hi dear,

I wanted to block from Internet a specific URL on our public
webserver that located on our DMZ:

We have a webserver on our DMZ example (https://toto.ourcompany.com) so we have
a policy that allow from Internet to access this webserver by SSL, what I want
to do is to block only for example (https://toto.ourcompany.com/Web/login.html).

I did a URL filtering profile and put this URL to the block
list and apply it to my Policy but it doesn’t work, I don’t really know if the
URL filtering profile it working from untrusted Zone to trusted Zone ?

Is there another way to block this specific URL ?

Thanks

Re: Block DMZ specific URL

nayubi — Wed, 09 Jan 2013 23:13:07 GMT

You should be able to apply a url filtering policy to block that specific url and apply on the policy form internet to dmz. You can verify the policy it is hitting with the following command: test security-policy-match source <address> destination-port 443 destination <address> protocol 6

Based off of this result place the url policy on this security policy.

You should also check your url filtering logs to see what is the url we see it as.

Re: Block DMZ specific URL

BSadozai — Thu, 10 Jan 2013 09:45:52 GMT

It work, many thanks for your help.

BES