topic Re: Blocking sub domain in URL filtering in Network Security

Blocking sub domain in URL filtering

InTheJuniverse — Tue, 12 Mar 2019 14:11:32 GMT

Hello

We are on Cisco FMC 2500, Code version 6.2.3

Is it possible to

1) Block url1.example.com and allow www.example.com?

2) Allow url2.example.com, block url1.example.com, and allow www.example.com?

3) Allow child domains and block parent domain?

I have read documentation that this is not possible, but trying forums just in case 🙂

Thank you very much.

Re: Blocking sub domain in URL filtering

Sheraz.Salim — Wed, 26 Dec 2018 10:27:52 GMT

this is not possible. we had similar issue open TAC and TAC advise to use cisco web security appliance. (WSA).

Re: Blocking sub domain in URL filtering

Abheesh Kumar — Wed, 26 Dec 2018 10:47:17 GMT

Hi,

Try creating like below screenshot, allow the subdomians first and then block the parent domain.

FMC will not support to block wildcard

Create allow rule with url1.example.com then create block rule for example.com

This way you can achive this but you need to specify all you child domains.

Thanks,
Abheesh
PS: Please don't forget to rate and select as validated answer if this answered your question

Re: Blocking sub domain in URL filtering

InTheJuniverse — Wed, 26 Dec 2018 10:58:34 GMT

Abhishek, thank you.

Our policies are designed such that the Global Whitelist / Blacklist Objects are inherited to every Domain and applied first thru section 'Mandatory Global Policies', followed by "Default DomainName policy".

So, a policy into Child domain will look something like this (please check screen shot)

Just before reading your response, I created a similar policy and awaiting user confirmation.

I am assuming this will work because the "subdomain" sites I want to block are not allowed explicitly in Global Policy,

Waiting for user confirmation.

Thank you in advance.

Re: Blocking sub domain in URL filtering

Abheesh Kumar — Wed, 26 Dec 2018 11:58:44 GMT

If this doesn't work, create a URL object and try creating specific rules. Anyway plz reply with the user confirmation

Thanks,
Abheesh
PS: Please don't forget to rate and select as validated answer if this answered your question

Re: Blocking sub domain in URL filtering

InTheJuniverse — Thu, 27 Dec 2018 09:17:11 GMT

It works this way, thanks.

I got another problem with http and https blocking, but I am going to try something and get back.

Thank you.

Re: Blocking sub domain in URL filtering

Abheesh Kumar — Thu, 27 Dec 2018 09:27:16 GMT

Try with url without specifying http/https, any way let us know with your output.

HTH
Abheesh

Re: Blocking sub domain in URL filtering

InTheJuniverse — Fri, 28 Dec 2018 09:46:47 GMT

Ok problem resolved. Using Objects or URLs in the ACP made no difference.