Question

A security engineer configures URL filtering on a Cisco Secure Firewall Threat Defense (FTD) device managed by FMC. Corporate policy requires that any website with an unknown/uncategorized classification, as well as any site whose reputation score indicates it is high-risk (Questionable/Suspicious to High Risk), must be blocked for the internal user zone. All other categorized, reputable business sites should be allowed. Which access control rule configuration meets this requirement?

Accepted Answer

Create an access control rule with the action Block, matching URL category 'Uncategorized' plus all categories set to reputation levels 1-3 (High Risk to Suspicious), and place it above the allow rules.

Answer

Enable only the Security Intelligence URL feed and rely on Cisco Talos to automatically drop all uncategorized and low-reputation traffic without any access control rule.

Answer

Create a single allow rule for all URL categories and enable Application Visibility and Control (AVC) to inspect and drop uncategorized flows dynamically.

Answer

Configure a DNS policy with a sinkhole action for uncategorized domains and set the default access control action to Trust.