Firepower log when certain keywords/topics are accessed

[fdarkaou]

Hi everyone,

I would like to know if it is possible to have an email sent to the admin whenever someone visits a website that is related to a certain topic. For example if someone is searches/access content that is related to "burgers", is it possible to send a notification (without blocking access)? 

I am aware of the URL Filtering capabilities we have on our Firepower devices, but as I understand it, it checks for content/traffic related to certain predefined categories by Cisco. 

Thank you!

[Mohammed al Baqari]

Yes, you can create a rule in ACP to match this category and in the logging
tab you set the actions as required. You generate a syslog or event for
this rule. Next configure syslogs to send email as below link


https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/200479-Configure-Logging-on-FTD-via-FMC.html#anc14

[fdarkaou]

Thank you Mohammed!