FirePower HTTPS URL Filerting

[istewart11]

Hello,

from what I've read to do HTTPS url object filtering Cisco FirePower will check the Certificate CN name, will it also check the SAN entries?

Just wondering how it will work with a singel CN name and multiple SAN names on a cert used across multiple web sites.

[Marius Gunnerud · Accepted solution]

no it does not check the subdomains listed in the certificate, so do not use subdomains when creating the HTTPS filter.  Instead use company.com (and not www.company.com).  In this case the filter will match the entire host name including subdomains.

[istewart11]

Thanks for clarification