Firepower - Geoblocking countries

[Humongous]

I geoblock traffic from most countries.  I have run into a few websites that my clients need access to but are located in one of the blocked countries.  Is there a way to allow these websites through AND continue to block other traffic from the country w/o having to purchase the URL Filtering license from Cisco?  Thanks in advance!

[Marvin Rhoads · Accepted solution]

If you want to take any policy action (monitor, block, allow by exception, etc.) for individual URLs then you need the URL Filtering licensing.

[Humongous]

That is what I thought - just wanted to verify - thanks!

[bstewart]

Were you trying to allow a specific URL (http://example.com/thing1.html) or just the site (example.com or 150.234.210.205)?

The latter shouldn't take a URL filtering license; the Security Intelligence whitelist/blocklist can handle that.

(I realize this was a year and a half ago...)