topic Re: how can i check which web url is blocking in cisco firepower in Network Security

how can i check which web url is blocking in cisco firepower

shahzadali632425923 — Tue, 02 Jun 2020 07:12:18 GMT

Hi Team,

I am using Cisco Firepower 2110 with Virtual FMC.

please guide how can I check which web URL is blocking my firewall and which Web URL is not.

Actually, in our network one specific site, is not accessible which is import I have checked almost anything but did not find a site is still inaccessible. Could you please guide how can I check that this site is not blocking by my firewall?

Re: how can i check which web url is blocking in cisco firepower

balaji.bandi — Tue, 02 Jun 2020 07:51:27 GMT

Go to Analysis and events and check based on the source IP you were trying to initiate a connection to the destination website.

you will see the logs (take 10Seconds delay max to appear in the logs).

Re: how can i check which web url is blocking in cisco firepower

dagar — Thu, 04 Jun 2020 13:19:36 GMT

If you go to Analysis->Connections-> Events and then filter under Action. I have estreamer setup to import into Splunk and have created some dashboards and searches for this type of thing.