Http Vs Https sites

[clark white]

Dears

I m blocking a streaming media category in url filtering but it is not getting blocked, and it is falling in the default action,  I have a question that without enabling SSL decryption https websites cannot be blocked ??  as I have seen in forums people says that it can be controlled by application filtering???

I want to block youtube.com, facebook.com, and there are many https sites so how we can controlled all https sites  becz enabling ssl decryption for all the traffic will impact the performance on the firepower module on 5525X

thanks

[hoffa2000]

Hi

If it's a regular block of a site you want to achieve application filtering works well for me, even if the site is encrypted. If you have version 6 or above on the Firepower modules there is also the option of blocking the DNS lookup for the sites.

Regards

Fredrik

[clark white]

Dear Hoffa,

Please find  the attached file where it shows that all https traffic is passed to the default action where I have a policy on top level where I am blocking youtube for the users.

thanks