topic Have you tried to manually in Network Security

Cisco 5506x Firepower URL Filtering not working correctly

ross_rulz — Tue, 12 Mar 2019 07:50:21 GMT

Hi,

I have a Cisco 5506X ASA with firepower fully licensed. I have URL filtering category Pornography/Adult any reputation set to block. Now some porn websites get blocked but some don't. When I'm in the ASDM looking at the monitoring of live connections I see the porn website that went through and it says its un-categorized. I went to the bright cloud url reputation website and it classifies this website as Pornography/Adult.

So my question is why would the ASA be classifying this website us unknown?

Any thoughts I'd appreciate it.

Hi Ross,

ankojha — Fri, 03 Jun 2016 09:41:55 GMT

Hi Ross,

Can you check under System->configuration ->cloud services (on version 5.4)

if the option "query cloud for unknown urls" is enabled or not .

if version 6.0 then go to System->Integration->Cisco CSI->

for same option.

if it is disabled then enable it and save it and check if issue occurs again.

rate if it helps.

Thanks,

Ankita

Hi Antika

ross_rulz — Fri, 03 Jun 2016 11:29:03 GMT

Hi Antika

I already had this enabled but still no luck. Not sure what else it could be. Maybe time to open a TAC request.

Thanks

Have you tried to manually

nspasov — Sat, 04 Jun 2016 15:55:03 GMT

Have you tried to manually update/refresh the URL filtering database and see if that works?

Thank you for rating helpful posts!

When you say manually update

ross_rulz — Sat, 04 Jun 2016 22:09:36 GMT

When you say manually update the database I have unticked Cisco CSI box saved then renabled. Is this the correct way to manually update the database?

Thanks

I ended up opening a TAC

ross_rulz — Wed, 15 Jun 2016 07:45:32 GMT

I ended up opening a TAC request and the engineer identified it as a bug. Apparently this will be fixed in the next release of software. The TAC engineer ran a script to fix the issues in the mean time.

Here's the link for the bug:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuy79984/?reffering_site=dumpcr