Firepower denying packets due to wrong category

[debhaskar]

Hi All,

Need your suggestion on FTD URL categorization, We have an access policy for same destination but BitTorrent not allowed in same access rule. And If we check required URL that also not categorized under BitTorrent, if we check under FMC>analytics>advance>URL. It category under SaaS and B2B but in log it shows under BitTorrent.

Can anyone suggest how re-category from BitTorrent to SaaS and B2B and how BitTorrent category is showing in log?

[Marvin Rhoads · Accepted solution]

Web Application = BitTorrent is not the same as URL category = SaaS and B2B.

[debhaskar]

Thanks @Marvin Rhoads for your reply. Can you confirm Web Application and that application which is using in access rule are same or not? If not why traffic not hitting current rule? Current rule matching source and Destination allow port https/http and application allow for http & https.

What could be the reason for in log shows Web Application = BitTorren? But for same source and different destination it not shown BitTorren.

Can you also suggest if it using TLS v1.3 which could be leading the firewall to miss identify its categories?