cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Block New Domains Adv. Licence

Highlighted
Building a reputation

Block New Domains Adv. Licence

Hi, 

 

Is it possible to block new domains with the advanced security licence?

 

My partner received a text with what I know is a phishing site. It's 1 day old and is identical to the HSBC UK login page (I won't put the URL here for obvious reasons). Merkai didn't block the URL, presumably because it has not been assigned a category yet. I wonder how long it will take for it to be added?

 

I've had a few comments from clients as well that not everything they think should be blocked, is blocked. This makes it harder for me to justify the licencing costs. 

 

Here are my category filters

 

AnythingHosted_0-1605785877297.png

 

 

Thanks,

Chris

 

4 REPLIES 4
Highlighted
A model citizen

Re: Block New Domains Adv. Licence

I believe the category filtering still uses the BrightCloud feed. You can go to the BrightCloud website to check how a URL is being categorised and it’s reputation. I’m not sure how quickly they update the categories

 

If you want to block a URL before it gets categorised, you’ll just have to block it with the URL filtering. That should provide a temporary fix until it falls into a proper category.

Highlighted
A model citizen

Re: Block New Domains Adv. Licence

Brightcloud is quite fast in adding new URLs when they are suggested in their system. In the past, I typically got answers after three to six hours.

 

If you want to block newly seen Domains, integration with Cisco Umbrella could be the solution.

Highlighted
Kind of a big deal

Re: Block New Domains Adv. Licence

It is not possible to block newly added domains.

 

You would need to use Cisco Umbrella to do that.

Highlighted
Building a reputation

Re: Block New Domains Adv. Licence

Thanks. I submitted to BrightCloud and they came back within 2 hours! Impressive. 

 

Ah, I'll look at Umbrella, thanks for the suggestion. 

Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.