Cisco ASA - Permit/Deny Traffic Domain name FQDN
refer to:
https://www.fir3net.com/Firewalls/Cisco/cisco-asa-domain-fqdn-based-acls.html
https://www.fir3net.com/Firewalls/Cisco/cisco-asa-domain-fqdn-based-acls.html
dns domain-lookup outside DNS server-group China_Telecom_SH_DNS name-server 202.96.209.133 202.96.209.5 domain-name Oneitc.local object network obj-i1.mallcoo.cn fqdn i1.mallcoo.cn
no access-list 200 extended permit ip object-group Reception-Desktop-with-liminatioin object-group Mallcoo-Server log no access-list 200 extended deny ip object-group Reception-Desktop-with-liminatioin any log no access-list 200 extended permit ip any any log access-list 200 extended permit ip object-group Reception-Desktop-with-liminatioin object obj-i1.mallcoo.cn access-list 200 extended permit ip object-group Reception-Desktop-with-liminatioin object-group Mallcoo-Server log access-list 200 extended deny ip object-group Reception-Desktop-with-liminatioin any log
sh access-list acl-inside sh dns dns expire-entry-timer minutes <minute>
相关推荐
liuttorrie 2020-07-04
Yakamoz 2020-06-17
Lophole 2020-06-13
liaoxuewu 2020-06-11
技术之博大精深 2020-06-10
Lophole 2020-05-25
gtsjx 2020-05-19
Lophole 2020-05-09
SIMONDOMAIN 2020-05-09
书虫媛 2020-05-03
Lophole 2020-04-29
书虫媛 2020-03-07
Lophole 2020-03-03
SIMONDOMAIN 2020-02-25
SIMONDOMAIN 2020-02-19
zhuakuang0 2020-02-17
书虫媛 2020-02-11