topic Firepower log when certain keywords/topics are accessed in Network Security

Firepower log when certain keywords/topics are accessed

fdarkaou — Thu, 14 May 2020 16:38:57 GMT

Hi everyone,

I would like to know if it is possible to have an email sent to the admin whenever someone visits a website that is related to a certain topic. For example if someone is searches/access content that is related to "burgers", is it possible to send a notification (without blocking access)?

I am aware of the URL Filtering capabilities we have on our Firepower devices, but as I understand it, it checks for content/traffic related to certain predefined categories by Cisco.

Thank you!

Re: Firepower log when certain topics are accessed

Mohammed al Baqari — Thu, 14 May 2020 19:16:49 GMT

Yes, you can create a rule in ACP to match this category and in the logging
tab you set the actions as required. You generate a syslog or event for
this rule. Next configure syslogs to send email as below link

https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/200479-Configure-Logging-on-FTD-via-FMC.html#anc14

Re: Firepower log when certain topics are accessed

fdarkaou — Fri, 15 May 2020 10:23:36 GMT

Thank you Mohammed!