topic Open Web Traffic on an FMC in Network Security

Open Web Traffic on an FMC

Vic48 — Fri, 21 Feb 2020 17:45:32 GMT

I'm trying to open web traffic to: upgrade.bitdefender.com on an FMC. I made a change to the access control rules as indicated in the attached pic, but it's had no effect. Is the correct policy to modify?

Thanks!

Re: Open Web Traffic on an FMC

nspasov — Wed, 11 Dec 2019 17:12:20 GMT

Is this for actual web traffic? Like users trying to browse to that URL? I ask this because the URL object that you have defined is for web browsing sessions. If you want to open your policy for other (Non web-based sessions) to upgrade.bitdefender.com without using an IP/subnet, you will need to utilize the FQDN-based objects that were introduced in version 6.4.0.

https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/reusable_objects.html

I hope this helps!

Thank you for rating helpful posts!

Re: Open Web Traffic on an FMC

Vic48 — Wed, 11 Dec 2019 19:30:12 GMT

So just to make sure we're on the same page...if we're trying to open the traffic via the application rather than a browser then we would use FQDN-based objects to implement it. Is that right?

Re: Open Web Traffic on an FMC

Vic48 — Wed, 11 Dec 2019 20:05:31 GMT

I just found out that this FMC is running v.6.2.3.2. How would it be handled in this version? Would it be under URL?

Re: Open Web Traffic on an FMC

nspasov — Sun, 15 Dec 2019 00:39:33 GMT

You will have to upgrade your FMC and managed sensors/firewalls to 6.4.0.x in order to get support for FQDN objects. In fact, 6.4.0.4 is the current recommended/Gold starred release.

Thank you for rating helpful posts!