topic Re: FirePOWER report Facebook usage by user in Network Security

FirePOWER report Facebook usage by user

Saurus — Tue, 12 Mar 2019 14:13:33 GMT

Hi,

Does anyone have an example how to create a report in FirePOWER that would show me access to Facebook by user? I would like to know who are the most frequent Facebook users.

Thank you

Paul

Re: FirePOWER report Facebook usage by user

Sheraz.Salim — Tue, 15 Jan 2019 15:41:53 GMT

Though in my experience firepower is a great IPS and a really not good in content filter. also if you want to check who is using facebook than you have to take in account facebook is no more http, its https. havning said that you need ssl decrypt on the box and also you must have a kind of AD and pxgrid or firepower user agant with AD.

so long story short the answer is no.

Re: FirePOWER report Facebook usage by user

Chess Norris — Wed, 16 Jan 2019 08:41:17 GMT

Totally agree. Most pages using https today and even if you can create a ssl policy in firepower, my experience is that it doesn't work very well. For URL filtering and reporting, I think umbrella or a web security appliance is the way to go.

Re: FirePOWER report Facebook usage by user

Chess Norris — Wed, 16 Jan 2019 08:42:30 GMT

Edit. Double post

Re: FirePOWER report Facebook usage by user

Saurus — Wed, 16 Jan 2019 19:39:51 GMT

Thank you all for your comments. You just confirmed my findings. I used Umbrella but the reports were not satisfactory. Again, thank you so much.

Paul

Re: FirePOWER report Facebook usage by user

Sheraz.Salim — Wed, 16 Jan 2019 20:19:32 GMT

Kindly please make this answer so other can benefit too