topic Firepower Application/URL Access Control Rules in Network Security

Firepower Application/URL Access Control Rules

rayelkin — Fri, 21 Feb 2020 16:57:57 GMT

Firepower gurus:

Looking for input on two questions I received from a Firepower sys admin:

Is there a way to block ALL uploads in one line? Does this capability exist?
Does a website or application that other Firepower users have posted combinations of URL/application rules to achieve particular results exist? A communal recipe book as it were.

Marvin Rhoads — Wed, 20 Mar 2019 07:40:04 GMT

You can block all files that Firepower is capable of detecting. Use something like this as your file policy rule:

But users would still be able to upload, for instance, using https (ssl/tls) because you are mostly likely not decrypting outbound ssl/tls.

Re your second question, there are some good ideas here:

rayelkin — Mon, 15 Apr 2019 16:01:17 GMT

Awesome! Thank you.