topic Re: Cisco Firepower in Endpoint Security

Cisco Firepower

saquib011 — Sat, 09 Mar 2019 01:47:13 GMT

Hi Everyone, I have one scenario but don't know how to do, one of my client asked me to block attachment option form Skype application. It means that there organisation users are able to use everything in Skype but don't able to attach any file. Can anyone tell me how to achieve this scenario i have Asa 5525x firepower SFR. Regards Saquib

Re: Cisco Firepower

yogdhanu — Thu, 05 Apr 2018 13:40:16 GMT

Hi Saquib,

You would require SSL decryption policy on the SFR so SFR can decrypt the traffic and then block "Skype file transfer" application using application control.

SSL policy is must as once traffic is encrypted, firepower or no other device for that matter can see the traffic and apply any restriction.

When you apply SSL policy, you might want to try it in off-production hours first as SSL takes huge amount of resources and can cause performance issues if the device is already being utilized to its full capacity.

Here is the article for SSL policy. You need decrypt-resign rule.

https://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/200202-Configuration-of-an-SSL-Inspection-Polic.html

Hope it helps,

yogesh

Re: Cisco Firepower

saquib011 — Thu, 05 Apr 2018 14:23:42 GMT

Thanks for your suggestion.
Is this the only solution we have through SFR

Re: Cisco Firepower

yogdhanu — Thu, 05 Apr 2018 16:52:34 GMT

Yes that's the only way through SFR.

Thanks

Yogesh