ASA to Firepower rule convertion

[jdonjuanl]

Hello

We are migrating an ASA 5540 (8.0.4) to Firepower (6.2.3.10) and an ACL on ASA has the next sentence...

access-list Outside extended permit ip object-group DM_INLINE_NETWORK_7 host Public-IP

object-group network DM_INLINE_NETWORK_7
network-object host www206.americanexpress.com
network-object host posconnection.webmedia.com.mx
network-object host pfizerwssp.lms.com.mx

Is there a way to translate this rule to Firepower because I believe Firepower does not support FQDN objects.

Regards

[Marvin Rhoads]

If you migrate to Firepower 6.3.0 or later it does support FQDN objects:

https://www.cisco.com/c/en/us/td/docs/security/firepower/630/relnotes/firepower-release-notes-630/new_features.html

[harmesh88 · Accepted solution]

if you have enabled URL filter so you can add all given URL in URL Filter Option in L7 Access Control Rule.