ISR1100X series enable IPS/ISD and URL-Filtering at same time

[wmendozaOpenlink]

Hiii

We are offering our clients for small areas, device from the ISR1100X series (ISR1100X-6G, C1161X, C1131X and C1121X) however we want to know if anyone has had experience with these devices and has been able to enable IPS/ISD and URL-Filtering at the same time, Is there a problem enabling both functions at the same time? I understand that these chasis have 8GB of RAM...

Another question, do you know what is the difference between download onbox and cloudbox URL database?

[Kanan Huseynli · Accepted solution]

Hi,

there is no restriction to use both at the same time.

Regarding "download onbox and cloudbox URL ", one (which is default) option is to use cloudbox URL. It means that every first URL query is sent to cloud for categorization/reputation. After that router caches that information. And this occurs for every URL.

The second option is to download full URL database and sync only. In this case, cloud is used only local DB does not have information.

In general, you can read all details about configuration and designing of URL in SD-WAN platforms in below documents:

https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/ios-xe-17/security-book-xe/url-filtering.html#concept_h2m_jpr_mqb

https://www.cisco.com/c/en/us/td/docs/solutions/CVD/SDWAN/cisco-sdwan-security-policy-design-guide.html#SecurityAppHostingTemplate&URLDatabase