cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1518
Views
0
Helpful
2
Replies

FirePower URL filtering need SSL decrypt?

Roy Lee
Level 1
Level 1

Hi All,

I have a FirePower with FMC and web filtering license.

I have enabled the URL filtering in the security intelligence with blocking all categories.

Is that good enough?

Can it perform URL filtering on https?

Is SSL decryption needed for url filtering?

Thanks,

Notmen

1 Accepted Solution

Accepted Solutions

@Roy Lee no you don't need to do SSL decryption for URL filtering. You would need SSL decryption for things such as Snort IPS inspection of web traffic or AMP.

View solution in original post

2 Replies 2

@Roy Lee no you don't need to do SSL decryption for URL filtering. You would need SSL decryption for things such as Snort IPS inspection of web traffic or AMP.

balaji.bandi
Hall of Fame
Hall of Fame

You do not need to decrypt the URL to block, you can block the URL.

 

if you looking to decrypt and inspect inside and make a decision then you need to decypt.

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: