cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
732
Views
0
Helpful
3
Replies

malware block page

ring zer0
Level 1
Level 1

In firepower 6.0 we do have option to display a page for websites blocked to user. If the website contains a malware, is there any option for user to see a warning page saying that website contains malware. I have file policy in place for all types of file and action is block malware but I dont find any warning page for user. 

3 Replies 3

Pujita Patni
Cisco Employee
Cisco Employee

Hello,

Once we detect a file to be malicious, it is after the file was scanned during/after the file download. Even if it was over http/https, file is found to be malicious either part of retrospective checks ot cloud disposition lookup. In this scenario, we will not be able to show a warning page.

Though, Cisco TALOS will learn a malicious file was delivered using a particular URL and  it will lower the reputation as appropriate. Based on your URL Policy, you can configure a custom http response page.

Thanks,

Pujita

Rate if it helps !

Ed Padilla Jr
Level 1
Level 1

There is no blocking message for Malware.  Only for Uri.....but it is good feature...

Jetsy Mathew
Cisco Employee
Cisco Employee

Hello Team,

Only for the URL rules, there is an option of http custom response page. We dont have the option which you are looking for . But surely you can put an enhancement request with the help of your Accounts team so that we can add this in the upcoming releases.Cisco will be really glad to look after your enhancement requests and add those based on the priorities.

Rate if that helps you

Regards

Jetsy 

Review Cisco Networking for a $25 gift card