Using NBAR for Applicatio ...
    08 May 08

    Using NBAR for Application Filtering

    Posted byBrian McGahan

    Hi Brian,

    Can we use NBAR on the gateway router to prevent internal users from watching video streams from any video web site (like


    Hi Ahmed,

    Yes, NBAR can be used to apply application based filters such as blocking traffic. To accomplish this we can categorize traffic based on the HTTP hostname. Next we will create a policy-map that matches the class and drops the traffic. Lastly the policy is applied outbound to the Internet. Syntax-wise this would read:

    class-map match-all YOUTUBE
    match protocol http host "**"
    policy-map DROP_YOUTUBE
    class YOUTUBE
    interface FastEthernet0/0
    description TO INTERNET
    service-policy output DROP_YOUTUBE

    NBAR for HTTP can also be used to match based on URL string or IANA MIME type. For more information see:

    Network-Based Application Recognition and Distributed Network-Based Application Recognition

    Hey! Don’t miss anything - subscribe to our newsletter!

    © 2022 INE. All Rights Reserved. All logos, trademarks and registered trademarks are the property of their respective owners.
    instagram Logofacebook Logotwitter Logolinkedin Logoyoutube Logo