cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
911
Views
0
Helpful
2
Replies

FirePower URL filtering need SSL decrypt?

Roy Lee
Beginner
Beginner

Hi All,

I have a FirePower with FMC and web filtering license.

I have enabled the URL filtering in the security intelligence with blocking all categories.

Is that good enough?

Can it perform URL filtering on https?

Is SSL decryption needed for url filtering?

Thanks,

Notmen

1 Accepted Solution

Accepted Solutions

Rob Ingram
VIP Expert VIP Expert
VIP Expert

@Roy Lee no you don't need to do SSL decryption for URL filtering. You would need SSL decryption for things such as Snort IPS inspection of web traffic or AMP.

View solution in original post

2 Replies 2

Rob Ingram
VIP Expert VIP Expert
VIP Expert

@Roy Lee no you don't need to do SSL decryption for URL filtering. You would need SSL decryption for things such as Snort IPS inspection of web traffic or AMP.

balaji.bandi
VIP Guru VIP Guru
VIP Guru

You do not need to decrypt the URL to block, you can block the URL.

 

if you looking to decrypt and inspect inside and make a decision then you need to decypt.

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers