topic Re: How does work cisco Firepower's URL filtering? in Network Security

How does work cisco Firepower's URL filtering?

HWAN — Wed, 17 Nov 2021 01:44:54 GMT

Hi Teams,

Firepower have URL filtering function.

I have some questions about this.

Q1) Firepower support URL restrict(filtering) option without Category license(In ACP rule). What is difference this URL restrict and URL filtering(use C License).

Q2) As to my knowledge, Firepower get URL Reputation from Cisco Talos automatically. When I deploy URL filtering normally, Is there way to verify provided URL list from Talos?

Thank you.

Re: How does work cisco Firepower's URL filtering?

nspasov — Fri, 19 Nov 2021 15:54:27 GMT

For #1 - You need the URL license if you want to perform filtering based on URL category and/or reputation. Without the URL license, you can perform filtering based on static, user-defined URLs. For more information you can check this link:

https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-v70/licensing_the_firepower_system.html?referring_site=RE&pos=2&page=https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-v70.html#reference_0FB126619D0649D79B4F666AACE82BAD

For #2 - URL categorization and reputation is based on TALOS starting with version 6.5. Prior to 6.5 this was done through webroot. You can check the reputation and/or category of URL at https://talosintelligence.com/

I hope this helps!

Thank you for rating helpful posts!

Re: How does work cisco Firepower's URL filtering?

HWAN — Mon, 29 Nov 2021 06:09:55 GMT

Hi nspasov,

Thanks for your reply.

Your information is very useful!

Thank you.