topic Re: URL Filtering Update in Network Security

URL Filtering Update

sprocket10 — Fri, 21 Feb 2020 17:49:37 GMT

Our Firepower is setup and working correctly for Application blocking, but the URL blocking isnt working.

The Firepower can download updates successfully for firmware updates but under the Intergration option, the URL Filtering shows Last URL Filtering Update: Never

What could be stopping this from connecting out.

This is a replacement 5516 ASA and the previous (RMA) 5516 was URL filtering correctly. The replacement has been restored from backup and the Firepower also restored from backup. I have checked the IP, Gateway and DNS of the Firepower module and they seem to be correct, and as I said, then fireware patches are being pulled from Cisco.

Re: URL Filtering Update

Marvin Rhoads — Sat, 11 Jan 2020 03:33:30 GMT

Can you check under Objects > Security Intelligence > Cisco-DNS-and_URL-Intelligence-Feed and confirm if it is getting periodic updates?

Re: URL Filtering Update

sprocket10 — Mon, 13 Jan 2020 08:16:54 GMT

Yes, these are getting updates. The last update was less than one hour ago.

Re: URL Filtering Update

Marvin Rhoads — Mon, 13 Jan 2020 14:24:20 GMT

Hmm, it seems things are working properly on the FMC.

I assume you verified the Smart license (if the ASA is running FTD, otherwise classic license) is properly registered.

When you put the replacement ASA 5516-X in did you verify it is assigned the URL filtering license within device management?

Re: URL Filtering Update

sprocket10 — Mon, 13 Jan 2020 14:31:42 GMT

This helped me point to the resolution. I noticed that Geolocation hadnt updated and once I clicked download, the URL download started working. Im not sure how these are linked.