This seems really silly since it is such a commonly used feature. However there is an easier way. You could subscribe to OpenDNS and use their web filtering capabilities. Instead of managing expensive appliances in your organization, you can just centrally manage OpenDNS.

OpenDNS might not be a solution for everyone but it definitely has it’s place in the market. You can read more about it here.

-RP

This is all good and well until you are running a small business where every dollar counts. Luckily with the Cisco ASA you can implement web filtering without subscribing to a web blocking service. You can still subscribe to a service if you want to, but you aren’t forced to.

Instead you can use class-maps in the ASA to provide the ability to do this. This should only be done in small environments however. Once you go to a larger environment you should buy the subscription service. Please visit this link for instructions on how to do this.

-RP