cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Who Me Too'd this topic

FMC - All URL's are Uncategorized

scvvuuren
Level 1
Level 1

Good Day

 

I have recently setup a new FMC 6.6 with FTD environment for a customer.

Mostly all feeds seems to be working(Threat Intel/IPS/Updates) but for the life of me I cant seem to get the URL Categories in the system.

The first thing I noticed is the FMC does not use the proxy configuration to query the URL Categories, so we allowed FMC IP to query it directly and it seemed to update the feed now.

As for the policy it is essentially an any any permit for URL Category at this stage.

 

In the Connection Events View the application for example shows Facebook but the URL Category remains unknown.

It has to be noted that the actual connection destination is a Proxy Server that is not encrypted to the FTD can see the URL so I do not think that should be an issue.

 

Has anyone seen this behavior before or am I missing something on the policy side?

Who Me Too'd this topic