FirePower URL filtering need SSL decrypt?

[Roy Lee]

Hi All,

I have a FirePower with FMC and web filtering license.

I have enabled the URL filtering in the security intelligence with blocking all categories.

Is that good enough?

Can it perform URL filtering on https?

Is SSL decryption needed for url filtering?

Thanks,

Notmen

[Rob Ingram · Accepted solution]

@Roy Lee no you don't need to do SSL decryption for URL filtering. You would need SSL decryption for things such as Snort IPS inspection of web traffic or AMP.

[balaji.bandi]

You do not need to decrypt the URL to block, you can block the URL.

if you looking to decrypt and inspect inside and make a decision then you need to decypt.