topic Re: Facebook URL is not blocking on cisco ASA 5512 firepower in Network Security

Facebook URL is not blocking on cisco ASA 5512 firepower

Muhammad Amin Zia — Fri, 21 Feb 2020 15:56:57 GMT

Hello experts I am trying to block facebook url for my lan users but when I create a policy with action block and writing a url "www.facebook.com" on it. It is not blocking facebook web for my lan users. any help would be highly appreciated.

Note : I dont want to change anything on my asa via command line, I just want to add url on firesight to block the facebook login web page.

Re: Facebook URL is not blocking on cisco ASA 5512 firepower

Marvin Rhoads — Thu, 05 Jul 2018 05:13:32 GMT

Do you have the URL filtering license applied to the module?

Can you share a screenshot of your Access Control Policy rule? It should look somethings like this (confirmed to work on my lab device):

Re: Facebook URL is not blocking on cisco ASA 5512 firepower

Muhammad Amin Zia — Thu, 05 Jul 2018 05:48:43 GMT

Please found the attached screenshot also my rule is at the top of the list i.e. it is rule 1 from source any and destination any

Re: Facebook URL is not blocking on cisco ASA 5512 firepower

Marvin Rhoads — Thu, 05 Jul 2018 16:00:04 GMT

Can you show me the overall ACP screenshot with all of the rules listed?

Also can you confirm that it has been successfully deployed to the module?

Re: Facebook URL is not blocking on cisco ASA 5512 firepower

Muhammad Amin Zia — Mon, 09 Jul 2018 06:42:52 GMT

I am sorry but i cannot share the overall rules list.

Re: Facebook URL is not blocking on cisco ASA 5512 firepower

Marvin Rhoads — Mon, 09 Jul 2018 15:07:41 GMT

You may want to contact Cisco TAC if you cannot share the details here for the configuration you are asking for help troubleshooting.

The feature definitely works - I have tested it successfully in my lab as well as deployed it in production customer networks.

Re: Facebook URL is not blocking on cisco ASA 5512 firepower

Muhammad Amin Zia — Wed, 11 Jul 2018 05:12:27 GMT

thank you for your reply is there any otherway to block this URL completely with all of its content. Also please let me know either the allow rules come first in the rule sequence or block rules come first.

Re: Facebook URL is not blocking on cisco ASA 5512 firepower

Marvin Rhoads — Wed, 11 Jul 2018 06:40:55 GMT

There are usually several ways to accomplish a given task. The one I recommended matches how Cisco teaches it and it works.

Rules are first match, evaluated from top (i.e. #1) down. Once you get a match (whether it is a allow or block or whatever), subsequent rules will not be evaluated. So give thought to how you order your rule sequence.