02-22-2023 01:23 AM
Hi everyone,
I'm trying to whitelist Facebook from Social Networking by creating the above rule to allow it, but it didn't work, although the ACL has been hit, the webpage can't load. I'm thinking to use a wildcard mask, like "*facebook.com" but seems like it doesn't work on Cisco Firepower. Is that any other method that I can try? Appreciate the help.
I have attached some pictures for reference.
Solved! Go to Solution.
03-13-2023 06:04 AM - edited 03-13-2023 06:05 AM
Hi Horusmax,
When you apply URL based ACL it will allow only facebook.com and it wont allow any Facebook supporting URL. Currently static.xx.fbcdn.net is supporting URL for Facebook which need allow in ACL. We would recommend you to apply Application based ACL instead of URL based ACL. Please verify the Application based ACL Screenshot below
But you want to control website based on URL control then make sure you enter all supporting URL's for Particular website. For Facebook you need to allow 2 URL's
2. static.xx.fbcdn.net
Hope above answer is help you to resolve the issue
-----------------------------------------
If you find my reply solved your question or issue, kindly click the 'Accept as Solution' button and vote it as helpful.
You can also learn more about Secure Firewall (formerly known as NGFW) through our live Ask the Experts (ATXs) session. Check out Cisco Network Security ATXs Resources [https://community.cisco.com/t5/security-knowledge-base/cisco-network-security-ask-the-experts-resources/ta-p/4416493] to view the latest schedule for upcoming sessions, as well as the useful references, e.g. online guides, FAQs.
-----------------------------------------
Regards
Arunkumar
03-13-2023 06:04 AM - edited 03-13-2023 06:05 AM
Hi Horusmax,
When you apply URL based ACL it will allow only facebook.com and it wont allow any Facebook supporting URL. Currently static.xx.fbcdn.net is supporting URL for Facebook which need allow in ACL. We would recommend you to apply Application based ACL instead of URL based ACL. Please verify the Application based ACL Screenshot below
But you want to control website based on URL control then make sure you enter all supporting URL's for Particular website. For Facebook you need to allow 2 URL's
2. static.xx.fbcdn.net
Hope above answer is help you to resolve the issue
-----------------------------------------
If you find my reply solved your question or issue, kindly click the 'Accept as Solution' button and vote it as helpful.
You can also learn more about Secure Firewall (formerly known as NGFW) through our live Ask the Experts (ATXs) session. Check out Cisco Network Security ATXs Resources [https://community.cisco.com/t5/security-knowledge-base/cisco-network-security-ask-the-experts-resources/ta-p/4416493] to view the latest schedule for upcoming sessions, as well as the useful references, e.g. online guides, FAQs.
-----------------------------------------
Regards
Arunkumar
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide