07-14-2016 12:20 PM - edited 03-12-2019 06:04 AM
In firepower 6.0 we do have option to display a page for websites blocked to user. If the website contains a malware, is there any option for user to see a warning page saying that website contains malware. I have file policy in place for all types of file and action is block malware but I dont find any warning page for user.
07-14-2016 08:47 PM
Hello,
Once we detect a file to be malicious, it is after the file was scanned during/after the file download. Even if it was over http/https, file is found to be malicious either part of retrospective checks ot cloud disposition lookup. In this scenario, we will not be able to show a warning page.
Though, Cisco TALOS will learn a malicious file was delivered using a particular URL and it will lower the reputation as appropriate. Based on your URL Policy, you can configure a custom http response page.
Thanks,
Pujita
Rate if it helps !
07-15-2016 11:06 AM
There is no blocking message for Malware. Only for Uri.....but it is good feature...
07-15-2016 12:18 PM
Hello Team,
Only for the URL rules, there is an option of http custom response page. We dont have the option which you are looking for . But surely you can put an enhancement request with the help of your Accounts team so that we can add this in the upcoming releases.Cisco will be really glad to look after your enhancement requests and add those based on the priorities.
Rate if that helps you
Regards
Jetsy
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide