Cisco Firepower v6.7 URL Filtering Whitelist

[horusmax911]

Hi everyone,

I'm trying to whitelist Facebook from Social Networking by creating the above rule to allow it, but it didn't work, although the ACL has been hit, the webpage can't load. I'm thinking to use a wildcard mask, like "*facebook.com" but seems like it doesn't work on Cisco Firepower. Is that any other method that I can try? Appreciate the help.

I have attached some pictures for reference.

[Arunkumar Sathasivam · Accepted solution]

Hi Horusmax,

When you apply URL based ACL it will allow only facebook.com and it wont allow any Facebook supporting URL. Currently static.xx.fbcdn.net is supporting URL for Facebook which need allow in ACL. We would recommend you to apply Application based ACL instead of URL based ACL.  Please verify the Application based ACL Screenshot below

But you want to control website based on URL control then make sure you enter all supporting URL's for Particular website. For Facebook you need to allow 2 URL's

1. www.facebook.com

2.  static.xx.fbcdn.net

Hope above answer is help you to resolve the issue

-----------------------------------------
If you find my reply solved your question or issue, kindly click the 'Accept as Solution' button and vote it as helpful.

You can also learn more about Secure Firewall (formerly known as NGFW) through our live Ask the Experts (ATXs) session. Check out Cisco Network Security ATXs Resources [https://community.cisco.com/t5/security-knowledge-base/cisco-network-security-ask-the-experts-resources/ta-p/4416493] to view the latest schedule for upcoming sessions, as well as the useful references, e.g. online guides, FAQs.
-----------------------------------------

Regards

Arunkumar