ByPass Traffic to Specific IP on FirePower Cisco

[Santimac]

Hello,

We have a Firepower Cisco for WEB Filtering, we have some Policies created already, but I want to Exclude an specific Host or IP, I tried to add the Rule on Access Control Policy as following (1st Rule) but it does not work, still blocking me forbidden domains, any suggestion?

[Bogdan Nita]

Traffic should be allowed if it is hitting the 1st rule.

You could go to monitoring and identify the session that is being blocked and see the reason.

HTH

Bogdan

[Santimac]

Yes, I am seeing the monitor and says is Blocked me by the Base Policy on the Main Access Policy Created.

[Bogdan Nita]

Then it is not hitting the 1st rule, as expected.

How are the URL objects configured ?

If they are allowed to access any site the url objects could be replaced with any.

[Santimac]

This is how is configured: