Access control policies

An access control policy is the primary policy for controlling network traffic. Each on your Next-Generation Firewall devices can have one currently applied policy. Through your access control policy, you can establish rules for allow, trust, monitor and block. Within your access control policies, you can configure Application Visibility and Control (AVC), URL Filtering, and Threat. You can also control traffic based on layer 3 and layer 4 information, as you would with a traditional stateful firewall. Access control policies can also reference a predefined Intrusion policy to provide you with a level of threat protection.

Configure your Access Control Policy (FMC)

Configure your Access Control Policy (FDM)

File Policy

If you are using FMC, you may want to create a File policy to protect against malware. File policies can detect your users uploading or downloading files of specific types over specific application protocols. If you have activated the Malware license, you can detect or block specified file types, and detect malware for specified file types.

Configure your File Policy

Other firewall policies

You can create other policies as appropriate for your security objectives. Here’s the list of policies available:

• Intrusion policies: Configure the intrusion prevention system (IPS).
  Watch the IPS policy balanced demo [Video 2:05 min]
• SSL policies: Determine how SSL/TLS traffic is treated. For example identify which SSL traffic is to be decrypted for inspected.
  View the SSL decryption demo [Video 7:38 min]
• DNS policies: Create DNS sinkholes.
  Check out the DNS sinkholing demo [Video 4:57 min]
• Identity policies: Enforce active or passive authentication.
  Watch Integrating Active Directory [Video 11:25 min]
• Network analysis policies: Configure IPS predecessor behavior.
  Take these steps to set up a network analysis policy.
• Network discovery policies: Configure host, user and application discovery.
  View the network discovery demo [Video 2:33 min]
• Prefilter policies: Determine what traffic needs to be analyzed, and what traffic can be fastpathed or blocked.
  Watch the Prefilter Policy Fast Path demo [Video 2:05]
• QoS policies: Enforce application-based rate limiting.
  Check out the application-based rate limiting demo [Video 4:05 min]
• Correlation policies: Determine actions to be taken if certain conditions occur, such as malware events.
  Use the following procedure to either activate or deactivate a correlation policy.
• Cluster policies: Deploy a cluster for Firepower Threat Defense.
  Follow these steps to group multiple Firepower Threat Defense units together as a single logical device.

Configure your firewall policies