Did anyone else notice Microsoft.com was unreachable for most of the day Monday if you're using Cisco's Firepower with the Security Intelligence Feed?
I am posting this so people are not wasting their time trying to find the root cause. We did not see anything blocked to Microsoft or any of their IP's in the logs or Security Intelligence Events.
Response from TAC;
"Cisco TALOS blacklisted the Microsoft.com domain earlier today, it was showing up under the “URL Malware” category under the SI events in our lab. However at this point they have corrected the issue. The feeds are updated every 2 hours. Please check if you can now access Microsoft.com."
