topic Cisco FTD URL filtering Issue in Network Security

Cisco FTD URL filtering Issue

telesymbol — Fri, 03 Jun 2022 14:39:00 GMT

Dear All,

we've installed two 2130 FTDs in HA, managed with FMCv, we've configured a rule to allow some users with gmail and ooutlook.com email providers. on the URL tab we've listed google.com and outlook.com. users get the Gmail home page but can not login and outlook.com does not respond. please advise on the issue.

regards

Re: Cisco FTD URL filtering Issue

Herald Sison — Mon, 06 Jun 2022 18:08:37 GMT

Whats is the arrangement of your access control rule from top to bottom?

allow

block

allow

if you can provide screenshot much better if you dont mind

Re: Cisco FTD URL filtering Issue

telesymbol — Mon, 20 Jun 2022 11:41:02 GMT

Hi All,

please see attached logs here and advise on the issue.

Regards

Re: Cisco FTD URL filtering Issue

Marvin Rhoads — Mon, 20 Jun 2022 16:44:18 GMT

The debugs show it failing due to no allow rules on gstatic.com and office.net URLs. The services you're trying to allow use a number of URLs and domains. Simply allowing the service's home page does not cover the full set of places the client needs to connect to in order to make it work. Have you considered using application matching instead of URL filtering?