Thanks for reading,
I have an ASA with Firepower and have setup Malware protection and URL filtering and all looks good from the monitoring in that I'm seeing threats detected and mitigated - Image attached.
I have 3 questions so any help appreciated;
1. how do I see what sites have been accessed or what has been blocked in more detail. I can for example see the categories blocking traffic but When I drill down into the category I just get a bulk number but no detail on what people are tryng to access. Ideally I'd like to see what is being dropped in order to tune the urls list.
2. how can I translate the above back to an individual machine? We do not have a domain controller so LDap etc.. not possible.
3. The Blocked content desitations are showing IP's but ideally I'd like to see the URLS or some reverse lookup.
Thanks in advance
Dave
