topic Hello, what do you use for in Network Security

Firepower URL-blocking - how to see hosts?

cisco — Sun, 10 Mar 2019 13:42:40 GMT

Hi,

I am working with setting up a Firepower-system on a ASA5525X. I have enabled blocking of some URL-categories, this is working fine and I can see that a number of connections to forbiddel categories are stopped. But how can I drill this down and see what internal hosts are trying to access forbiddel URLs? Any standard reports or dashboards that gives this information?

Regards,

Thor-Egil

Hello, what do you use for

Boris Uskov — Mon, 07 Nov 2016 15:15:01 GMT

Hello, what do you use for configuration of FirePOWER module? ASDM or FirePOWER Management Center (FMC)? In FMC you can get detailed information about every transaction in tab Analysis -> Connection -> Events. Please, see the attach.

But first, you need to configure logging in the Access Policies.

Thank you fpr your anwer,

cisco — Tue, 08 Nov 2016 07:34:19 GMT

Thank you fpr your anwer, this was what I was looking for.

Br,

Thor-Egil