Narrowing on-premise server's access to the internet to only the Wildfire.

[jnaranjo]

Hi everyone I have an interesting question that I hope you can answer. And I really hope we can learn from it. question: According to my knowledge, the on-premise console, and the on-premise core server, they both need to connect to the wildfire and I'd need to allow those servers to connect to the port "443". The problem is that if I allowed those servers to navigate to the port "443" they would have access to the entire or almost the entire internet. Is there any specific Wildfire's network segment or some configuration that I can do on my firewall to allow both servers to connect ONLY to the Wildfire service while prohibiting them to connect to the whole internet? thanks for your time

[efrancis · Accepted solution]

Jnaranjo-

Yes, you can do URL filtering on the firewall. You can then limit the URL to only the Wildfire cloud you choose to connect to.