Why is Pixabay.com blocked?

[zacharyb@ami.com]

Why is Pixabay.com blocked and marked as High Risk?
https://www.cisco.com/c/en/us/td/docs/security/firepower/Application_Detectors/vdb_307/cisco_firepower_application_detector_reference_307/applications_p.html#wp3251917744

It is used for stock images for PPTs and such. It does have a relevant business use case. Can this be explained?

[Marvin Rhoads]

If it's needed for your enterprise you can override the block with a URL Whitelist entry.

Objects > Object Management > Security Intelligence > URL List and Feeds. Then edit the Global URL Whitelist.

The Security Intelligence tab on your deployed Access Control Policy should already have a default settings to include that Whitelist object.

[zacharyb@ami.com]

I understand that it can be whitelisted, but our IT department does not like whitelisting items that are considered high risk.  So, i went tot he location where the item i linked above was listed and am coming to the associated forum to see why it is marked hihg risk.  Is there any method to get a report as to why?

[Marvin Rhoads]

For URL reputation, Cisco Firepower is currently using the service provided by brightcloud.com (transitioning to Talos/Umbrella). Interestingly both brightcloud.com and talosintelligence.com list pixabay.com as having a good/trustworthy reputation.

You can try opening a TAC ticket or a Talos Reputation support ticket to request a change in the VDB regarding business relevance.

https://www.talosintelligence.com/reputation_center/support

That's not guaranteed though as they may not share the reasons they have for giving it low business relevance.

[jeff.reese]

I can not find a place to open a ticket for Talos on thier web page and TAC has no Talos option.

How do you open a ticket? Please.

[Marvin Rhoads]

The page I linked earlier should look like the screenshot below. Just click the "Submit a Reputation Ticket" button.

[zacharyb@ami.com]

Oh and thanks for your reply.