Access to Specific Application

[ssan239]

Hi Team,

What is the best way to give access to specific applications such as Webex, Zoom, Office365 anything for that matter.

Regards,

Sanjay S

[balaji.bandi]

Most of the vendor says bypass any inspection these kind of traffic. you can also use app detector.

There is a connectors for get the IP range from the Cloud provider.

example :

https://developer.cisco.com/codeexchange/github/repo/chrivand/Firepower_O365_Feed_Parser

[ssan239]

Hi Balaji,

Thank you for your help. For O365 this is the connector you shared. May i know if there is anything like this for webex as well?

Is there anything like EDL(PaloAlto) or UpdatableObjects(Checkpoint) is there anythere in FTD?

Regards,

Sanjay S

[Rob Ingram]

@ssan239 you can use application objects for Zoom, Webex and Office 365 in the Access Control Policy.

Yes, from FMC version 7.0 you can use dynamic objects (like UpdateObjects on Check Point).

https://community.cisco.com/t5/security-knowledge-base/cisco-secure-dynamic-attribute-connector-csdac/ta-p/4465565

https://www.youtube.com/watch?v=Azvc7HR_cmo

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/integrations/dynamic-attributes-connector/1-0/cisco-secure-dynamic-attributes-connector/dynamic-objects-fmc-access-control-rules.html

[balaji.bandi]

FTD have update object, Rob provided some guide lines.