topic Hi Hector in Network Security

FirePOWER URL Filtering Capability

Ji-Won Park — Sun, 10 Mar 2019 13:23:49 GMT

Hi all,

Can I actually do time based (quota) web access to users? For example, I want group A to access Marketing sites for 1 hour a day. Is this something possible in FirePOWER?

Thanks

You can't do that with the

Marvin Rhoads — Wed, 17 Jun 2015 12:46:02 GMT

You can't do that with the current (5.4) FirePOWER modules and FireSIGHT Management Center.

I've heard rumor it may be possible in 6.0 (later this year) but we will have to wait and see if that feature makes the cut.

Hello,

Akhtar Samo — Fri, 29 Jan 2016 06:30:15 GMT

Hello,

may I know if it's possible to exempt a URL from IPS inspection? If yes can it be done without url filtering license?

regards,

Akhtar

Hi Akhtar,

Ji-Won Park — Thu, 04 Feb 2016 20:08:02 GMT

Hi Akhtar,

I believe it is possible. You have to build a ACL for sourcefire redirection anyways to redirect the traffic, and you can deny particular fqdn using the ACL.

You will be matching that ACL in your class-map and apply the necessary policy.

Hope it helps.

Hello, I had the same

hector.ricapa — Wed, 20 Apr 2016 12:47:32 GMT

Hello, I had the same question, since version 6.0.1 is out, is it possible to do time based (quota) web access to users?

Thanks,

Hi Hector

pazzi — Wed, 20 Apr 2016 12:55:11 GMT

Hi Hector

The URL filtering in Firepower does not support time-based quota, even in 6.0.1.

That feature exists on the Web Security Appliance (WSA).

Paul

The basic requirement for URL

Jetsy Mathew — Sat, 23 Apr 2016 11:05:14 GMT

The basic requirement for URL filtering to work is to have a URL filtering license. If you have a url filtering license you can block or allow the URLS based on the cateogarization under which those URL 's falls.You can create access control policies based on those cateogarizations and you can mention the required actions . Its always better to upgrade the devices in a timely fashion according to the updated releases. Time based access control policy management is not yet started to support in firepower devices.