Cisco Firework 1120 - FQDN Resolution

tainarapedrosa — Tue, 03 Oct 2023 23:52:20 GMT

Hey guys,

I have a client that has deployed Cisco Firework 1120 in its environment. We're implementing a SaaS solution in their environment, which must have incoming traffic released by the FQDN. There's a limitation because it works with packet filtering, that's, based on IPs. Is there any way to perform resolution by FQDN to filter traffic through access control rules or pre-filter policy? A firmware update, for example?
I found these two technical notes, but I don't know if they cover the model they have. Can you help me, please?

https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/214505-configure-fqdn-based-object-for-access-c.html

https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/214698-understand-fqdn-feature-on-firepower-thr.html

They even opened a ticket directly with support, but I don't know if they effectively explained the need.

Thank you =]

Re: Cisco Firework 1120 - FQDN Resolution

Marvin Rhoads — Wed, 04 Oct 2023 02:18:17 GMT

Yes, using FQDNs in an ACL is fully supported as of release 6.3 - which is quite old by now (first released in March 2020).

The Firepower 1120 requires a minimum of release 6.4 just to operate. 7.2.5 is the current recommended release.

topic Cisco Firework 1120 - FQDN Resolution in Network Security

Cisco Firework 1120 - FQDN Resolution

Re: Cisco Firework 1120 - FQDN Resolution