topic FMC6.1 URL filter passive authentication in Network Security

FMC6.1 URL filter passive authentication

mfilipovski — Tue, 12 Mar 2019 13:13:37 GMT

Hello,

Using 5508-x with FMC6.1 and that part works fine. I have a realm and user agent setup and that part works. I want to do URL filtering on users based on passive authentication.

I have a access-rule based on a testuser but it does not block access to my URLS. The URL filtering works if i base the filtering on networks.

Is it supposed to work with passive authentication?

Martin

Please review the below urls

syeda3 — Thu, 22 Dec 2016 19:48:43 GMT

Please review the below urls which might be useful for your issue with the URL Filter along with the configuration example for URL Filtering.

http://www.cisco.com/c/en/us/td/docs/security/firepower/610/relnotes/Firepower_System_Release_Notes_Version_610.html

http://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118852-technote-firesight-00.html

http://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/117956-technote-sourcefire-00.html

Hi!

mfilipovski — Thu, 22 Dec 2016 20:10:37 GMT

Hi!

Gonna look at the urls tomorrow. I have been testing bit more and sometimes i get the passive authentication to block the testuser. Not sure if it has to do with the login part on the computer. If the user has been logged in for one hour it does not block. If i logout/in then it usally blocks.

I moved the user-agent to a

mfilipovski — Thu, 26 Jan 2017 09:09:00 GMT

I moved the user-agent to a fresh installed windows server 2012r2 and it has been stable since 3 weeks back.

Thanks