ASA5506 with FirePower

[melhem.w.dagher1]

Hello everyone, 

we got the license for the url filtering and the malware for our asa 5506 with firepower

everything is working great.

we need to find a way to url filter website for our lan by ip 

example 192.168.9.10 (is not allowed to fb and youtube but everything else he can)

etc ..

can this be done ?

thank you in advance for the help

[Marvin Rhoads · Accepted solution]

You can do this with an Access Control Policy rule that matches on both source IP address and destination URLs.

Just make sure the rule is in the right order in your ACP - i.e. before any more general rules that might allow the traffic.