parameter-map type urlf-glob BAD-URL
 pattern cisco
class-map type urlfilter match-any CLASS_URL-FILTER
 match  url-keyword urlf-glob BAD-URL
class-map type inspect match-all CLASS_IN-TO-OUT
 match access-group name ACL_IN-TO-OUT
 match protocol http
policy-map type inspect urlfilter POLICY_URL-FILTER
 class type urlfilter CLASS_URL-FILTER
  log
  allow
policy-map type inspect POLICY_IN-TO-OUT
 class type inspect CLASS_IN-TO-OUT
  inspect
  service-policy urlfilter POLICY_URL-FILTER
 class class-default
  drop log
zone-pair security ZONEP_IN-TO-OUT source INSIDE destination OUTSIDE
 service-policy type inspect POLICY_IN-TO-OUT

URLF:Sent Deny page with FIN to client and RST to server

parameter-map type urlf-glob URL_GAMBLING
 pattern cisco
parameter-map type urlf-glob PERMIT_SITES
 pattern *
!
class-map type urlfilter match-any CLASS_BLOCK-SITES
 match  server-domain urlf-glob URL_GAMBLING
class-map type urlfilter match-any CLASS_PERMIT-SITES
 match  server-domain urlf-glob PERMIT_SITES
!
class-map type inspect match-all CLASS_IN-TO-OUT
 match access-group name ACL_IN-TO-OUT
 match protocol http
!
policy-map type inspect urlfilter POLICY_URL-FILTER
 parameter type urlfpolicy local URLFilter
 class type urlfilter CLASS_BLOCK-SITES
  reset
 class type urlfilter CLASS_PERMIT-SITES
  allow
!
policy-map type inspect POLICY_IN-TO-OUT
 class type inspect CLASS_IN-TO-OUT
  inspect
  service-policy urlfilter POLICY_URL-FILTER
 class class-default
  drop
!
zone-pair security ZONEP_IN-TO-OUT source INSIDE destination OUTSIDE
 service-policy type inspect POLICY_IN-TO-OUT