topic Re: Social blocking in Network Security

Social blocking

Haval.Darwesh — Thu, 01 Dec 2022 09:06:01 GMT

Hello,

Please, from your knowledge and skills, what is the best way for blocking social and porno on a LAN?

A freind recommend using OpenDNS, what is your recommendations please?

Re: Social blocking

manabans — Thu, 01 Dec 2022 14:49:07 GMT

The requirement to block 'Social' or 'porno' can be achieved using Firepower with URL Filtering feature (Category + Reputation). Refer to the below document,
https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-v70/url_filtering.html#id_17110

Re: Social blocking

Chess Norris — Thu, 01 Dec 2022 14:55:17 GMT

@Haval.Darwesh If you already run Firepower FTD or ASA with the Firepower module, you can use the URL filter feature (a separate license is required). Otherwise Umbrella (previously OpenDNS) will do a great work. Cisco also have a Secure Web Appliance, but I've newer tried that.

/Chess

Re: Social blocking

Haval.Darwesh — Sat, 03 Dec 2022 16:35:03 GMT

thanks for your explanation, totally helpful.

is a Cisco Secure Firewall: Firepower 1120 Appliance with FTD Software (FPR1120-NGFW-K9) comes with URL filtering? or I should add URL filtering license?

as I read it above software comes with URL filtering, but I need to make sure.

I appreciate

Re: Social blocking

manabans — Sun, 04 Dec 2022 04:42:33 GMT

URL filtering license has to be added explicitly.

Re: Social blocking

Marvin Rhoads — Mon, 05 Dec 2022 12:42:49 GMT

If you don't have the URL filtering license, you cannot block based on category. You can block individual URLs without it but you need to add each and every one manually.