Social blocking

[Haval.Darwesh]

Hello,

Please, from your knowledge and skills, what is the best way for blocking social and porno on a LAN?

A freind recommend using OpenDNS, what is your recommendations please?

[manabans · Accepted solution]

The requirement to block 'Social' or 'porno' can be achieved using Firepower with URL Filtering feature (Category + Reputation). Refer to the below document,
https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-v70/url_filtering.html#id_17110

[Haval.Darwesh]

thanks for your explanation, totally helpful.

is a Cisco Secure Firewall: Firepower 1120 Appliance with FTD Software (FPR1120-NGFW-K9) comes with URL filtering? or I should add URL filtering license?

as I read it above software comes with URL filtering, but I need to make sure.

I appreciate

[manabans]

URL filtering license has to be added explicitly.

[Marvin Rhoads]

If you don't have the URL filtering license, you cannot block based on category. You can block individual URLs without it but you need to add each and every one manually.

[Chess Norris · Accepted solution]

@Haval.Darwesh If you already run Firepower FTD or ASA with the Firepower module, you can use the URL filter feature (a separate license is required). Otherwise Umbrella (previously OpenDNS) will do a great work. Cisco also have a Secure Web Appliance, but I've newer tried that.

/Chess