topic Re: FirePower URL filtering need SSL decrypt? in Network Security

FirePower URL filtering need SSL decrypt?

Roy Lee — Tue, 23 Nov 2021 09:26:28 GMT

Hi All,

I have a FirePower with FMC and web filtering license.

I have enabled the URL filtering in the security intelligence with blocking all categories.

Is that good enough?

Can it perform URL filtering on https?

Is SSL decryption needed for url filtering?

Thanks,

Notmen

Re: FirePower URL filtering need SSL decrypt?

Rob Ingram — Tue, 23 Nov 2021 10:25:23 GMT

@Roy Lee no you don't need to do SSL decryption for URL filtering. You would need SSL decryption for things such as Snort IPS inspection of web traffic or AMP.

Re: FirePower URL filtering need SSL decrypt?

balaji.bandi — Tue, 23 Nov 2021 17:28:31 GMT

You do not need to decrypt the URL to block, you can block the URL.

if you looking to decrypt and inspect inside and make a decision then you need to decypt.