Restrict Group Access to Internet

[dspeciale]

Hello,

I am trying to restrict a group of IP's on our network from accessing the internet.

I have a PIX 525 with ASDM 5.2

I can only seem to find docs on restricting certain websites for all on the network.

Also,
Is there a way to do this with a Network Object Group?

Thanks.

 

[brianinms]

You can either block them with an access-list or with by not natting their traffic.

object-group network BlockedHosts
network-object host x.x.x.x
network-object host y.y.y.y

access-list inside-inbound deny ip object-group BlockedHosts any

access-list inside-inbound in interface inside