topic Re: FMC not blocking URL in Network Security

FMC not blocking URL

cisco8887 — Fri, 21 Feb 2020 14:14:36 GMT

Hi All,

I have setup an access policy to block access to porn and gambling yet the number 1 hit on google can be opened .

am I doing something wrong here?

Re: FMC not blocking URL

cisco8887 — Thu, 24 Aug 2017 21:33:39 GMT

it is listing sex.com as uncatogorised !!!!!!!!!!!

this site was registered in 1985, has cisco not caught up yet?

Re: FMC not blocking URL

cisco8887 — Thu, 24 Aug 2017 21:34:35 GMT

it is listing adult site as uncatogorised !!!!!!!!!!!

this site was registered in 1985, has cisco not caught up yet?

Re: FMC not blocking URL

Maykol Rojas — Thu, 24 Aug 2017 23:31:02 GMT

Hello;

It will query brightcloud services to check the category of the site. As you can see, on brightcloud it is categorized correctly:

http://www.brightcloud.com/tools/change-request-url-categorization.php?endpoint=sex.com&catId=11,&category=Adult%20and%20Pornography,&repindex=96

The reason for this could be that either the FMC has not downloaded any information from brightcloud and/or there was an error querying the site.

Check the following post and try the troubleshooting steps listed there and let us know:

https://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118852-technote-firesight-00.html

Re: FMC not blocking URL

cisco8887 — Thu, 24 Aug 2017 23:34:33 GMT

it started to work when I selected query csi cloud for unknown categories but before that the database was downloaded the day before.

Could it be the database wasn't really updated?

is there a way of seeing the db version for url category ?

Re: FMC not blocking URL

Maykol Rojas — Thu, 24 Aug 2017 23:55:46 GMT

Hi;

I am assuming that the FMC won't download the category for every single URL on the internet, probably the most popular one, hence the Query CSI for unknown URL.

Not sure if in the current Database for download the Site is there. Based on experience I have not been able to see a "version" per se for the URL database, but I have seen the logs on the FMC stating that it downloaded correctly.

Mike.