URL blocking on the FMC

[Knassi]

I have this problem blocking a list of URLs. I created an object in the security intelligence containing a list of URLs i want to block. When applied in the ACP and enabled, the FMC blocks every traffic, not just the URLs in the object. Has anybody experienced this before? My research led me to believe that since it is a DNS policy, the FMC is picking the domain and blocking every website associated with that domain. Like if i am blocking "arccounts-google.com", the Firewall will block like google.com and every subdomain. Is that notmal? How do i block specific website like only "arccounts-google.com" and not block "google.com"?

[Amin Shahabuddin · Accepted solution]

Hi @Knassi,

You can try to configure the allow rule for parent domain first (www.google.com<https://www.google.com>) and then put the block rule for sub-domain after that.
* Allow rule can be any, but with the block rule, make sure you specify the security zones and source/destination networks.

-----------------------------------------
If you find my reply solved your question or issue, kindly click the 'Accept as Solution' button and vote it as helpful.

You can also learn more about Secure Firewall (formerly known as NGFW) through our live Ask the Experts (ATXs) session. Check out Cisco Network Security ATXs Resources [https://community.cisco.com/t5/security-knowledge-base/cisco-network-security-ask-the-experts-resources/ta-p/Redacted Phone Number] to view the latest schedule for upcoming sessions, as well as the useful references, e.g. online guides, FAQs.
-----------------------------------------