300-415 Question 222
Select 2A company is implementing Cisco SD-WAN with URL filtering to block access to specific categories of websites for compliance purposes. The IT administrator wants to ensure that employees cannot access websites categorized as 'Social Media' during work hours. What steps must the administrator perform to achieve this while ensuring other web traffic remains unaffected?
- A
Define a custom URL filtering policy that blocks the 'Social Media' category.
- B
Apply the URL filtering policy to the appropriate VPN under the centralized data policy.
- C
Enable TLS/SSL decryption on the SD-WAN Edge devices.
- D
Configure a local policy on each SD-WAN Edge device to block the 'Social Media' category.
- E
Create a whitelist of allowed URL categories and block all others.
Show answer and explanation
Correct answers: A, B
Explanation
To block access to 'Social Media' websites, the administrator must define a URL filtering policy targeting the specific category and apply it to the appropriate VPN using centralized policies. This approach ensures consistency and does not impact other types of web traffic. TLS/SSL decryption and local policies are unnecessary for this requirement, and a whitelist approach would prevent access to valid resources.
- A. Correct.
Correct: Defining a custom URL filtering policy that blocks the 'Social Media' category is required to enforce the desired restrictions.
- B. Correct.
Correct: Applying the filtering policy to the appropriate VPN under the centralized data policy ensures the policy is enforced network-wide and tied to specific traffic.
- C. Incorrect.
Incorrect: TLS/SSL decryption is not required for blocking URL categories in this scenario; URL filtering operates on categorized domains without needing decryption.
- D. Incorrect.
Incorrect: Configuring a local policy on each SD-WAN Edge device is unnecessary because URL filtering can be centrally applied using centralized policies.
- E. Incorrect.
Incorrect: Creating a whitelist and blocking all other categories is overly restrictive and does not align with the requirement to block only 'Social Media' websites.