https://community.cisco.com/t5/network-security/what-is-the-available-option-to-block-https-url-domain-in/m-p/3021082#M998919 <P>Hi all,</P> <P></P> <P>would like to know how SourceFire blocking on URL filtering<BR /><BR />Say, i would like too any variant of *.wixsite.com/webmail, and in HTTPS protocol<BR /><BR />What is the express way i can block it? <BR /><BR />My FMC with TAMC license, firepower node running on 6.1 code. <BR /><BR />Thanks<BR /><BR />Noel</P> Tue, 12 Mar 2019 13:24:06 GMT yong khang NG 2019-03-12T13:24:06Z https://community.cisco.com/t5/network-security/what-is-the-available-option-to-block-https-url-domain-in/m-p/3021082#M998919 <P>Hi all,</P> <P></P> <P>would like to know how SourceFire blocking on URL filtering<BR /><BR />Say, i would like too any variant of *.wixsite.com/webmail, and in HTTPS protocol<BR /><BR />What is the express way i can block it? <BR /><BR />My FMC with TAMC license, firepower node running on 6.1 code. <BR /><BR />Thanks<BR /><BR />Noel</P> Tue, 12 Mar 2019 13:24:06 GMT https://community.cisco.com/t5/network-security/what-is-the-available-option-to-block-https-url-domain-in/m-p/3021082#M998919 yong khang NG 2019-03-12T13:24:06Z https://community.cisco.com/t5/network-security/what-is-the-available-option-to-block-https-url-domain-in/m-p/3021083#M998928 <P>Hello Noel,</P> <P>in order to achieve above scenario you would have to have SSL policy configured with&nbsp;decrypt-resign action for desired traffic&nbsp;and then in ACP block rule with URL object wixsite.com/webmail or whatever site you are trying to block.</P> <P></P> <P>Without SSL decryption you can block web sites using subject Common Name in certificate used for traffic encryption.</P> <P></P> <P>Best regards,</P> <P>Veronika</P> Mon, 22 May 2017 13:40:03 GMT https://community.cisco.com/t5/network-security/what-is-the-available-option-to-block-https-url-domain-in/m-p/3021083#M998928 Veronika Klauzova 2017-05-22T13:40:03Z