Firepower Application/URL Access Control Rules

[rayelkin]

Firepower gurus:

Looking for input on two questions I received from a Firepower sys admin:

1. Is there a way to block ALL uploads in one line?  Does this capability exist?
2. Does a website or application that other Firepower users have posted combinations of URL/application rules to achieve particular results exist?  A communal recipe book as it were.

[Marvin Rhoads]

You can block all files that Firepower is capable of detecting. Use something like this as your file policy rule:

But users would still be able to upload, for instance, using https (ssl/tls) because you are mostly likely not decrypting outbound ssl/tls.

Re your second question, there are some good ideas here:

http://cisco.lookbookhq.com/ngfw_ftd_common-practices/ftd-common-practices

[rayelkin · Accepted solution]

Awesome! Thank you.