How does work cisco Firepower's URL filtering?

[HWAN]

Hi Teams,

Firepower have URL filtering function.

I have some questions about this.

Q1) Firepower support URL restrict(filtering) option without Category license(In ACP rule). What is difference this URL restrict and URL filtering(use C License).

Q2) As to my knowledge, Firepower get URL Reputation from Cisco Talos automatically. When I deploy URL filtering normally, Is there way to verify provided URL list from Talos?

Thank you.

[nspasov · Accepted solution]

For #1 - You need the URL license if you want to perform filtering based on URL category and/or reputation. Without the URL license, you can perform filtering based on static, user-defined URLs. For more information you can check this link:

https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-v70/licensing_the_firepower_system.html?referring_site=RE&pos=2&page=https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpm...

For #2 - URL categorization and reputation is based on TALOS starting with version 6.5. Prior to 6.5 this was done through webroot. You can check the reputation and/or category of URL at https://talosintelligence.com/

I hope this helps!

Thank you for rating helpful posts!

[HWAN]

Hi nspasov,

Thanks for your reply.

Your information is very useful!

Thank you.