What is the available option to block HTTPS URL domain in SourceFire

[yong khang NG]

Hi all,

would like to know how SourceFire blocking on URL filtering

Say, i would like too any variant of *.wixsite.com/webmail, and in HTTPS protocol

What is the express way i can block it?

My FMC with TAMC license, firepower node running on 6.1 code.

Thanks

Noel

[Veronika Klauzova]

Hello Noel,

in order to achieve above scenario you would have to have SSL policy configured with decrypt-resign action for desired traffic and then in ACP block rule with URL object wixsite.com/webmail or whatever site you are trying to block.

Without SSL decryption you can block web sites using subject Common Name in certificate used for traffic encryption.

Best regards,

Veronika