Allowing outbound access to trusted URLs with FMC

MauryJ — Wed, 16 Feb 2022 15:06:48 GMT

We are using FMC 6.7.0.2 and ASAs with FTD 6.7.0.2.

I'm looking for help on the right way to allow outbound access to trusted URLs. I had been attempting this using an access control policy rule, and then under URL's, adding to the Selected URLs list. But even here, I'm not clear on the proper syntax for specifying URLs.

For example, take these URLs used for Windows Update:

http://windowsupdate.microsoft.com

http://*.windowsupdate.microsoft.com

https://*.windowsupdate.microsoft.com

http://*.update.microsoft.com

https://*.update.microsoft.com

...

Should entering theses URLs as specified above work? I've seen references that using a period in front of URLs works as a wildcard rather than the asterisk.

Thank you for any guidance

Re: Allowing outbound access to trusted URLs with FMC

Rob Ingram — Wed, 16 Feb 2022 15:15:29 GMT

@MauryJ try using a URL object, the previous post below has examples to use.

https://community.cisco.com/t5/network-security/firepower-1010-windows-update-wildcard-policy/td-p/4146245

Re: Allowing outbound access to trusted URLs with FMC

MauryJ — Wed, 16 Feb 2022 17:59:37 GMT

Thank you Rob! I'll try that out.

topic Re: Allowing outbound access to trusted URLs with FMC in Network Security

Allowing outbound access to trusted URLs with FMC

Re: Allowing outbound access to trusted URLs with FMC

Re: Allowing outbound access to trusted URLs with FMC