ASA Non-HTTP connection

davidsonyo — Wed, 13 Mar 2019 01:09:08 GMT

Hi all,

We are seeing the following syslog massages when we are trying to authenticate via the ASA:

Non-HTTP connection from outside:10.100.100.1/51253 to inside:192.168.76.13/8905 denied by redirect filter; only HTTP connections are supported for redirection.

Built inbound TCP connection 5181 for outside:10.100.100.1/51253 (10.100.100.1/51253)(LOCAL\testuser) to inside:192.168.76.13/8443 (192.168.76.13/8905) (testuser)

Teardown TCP connection 5181 for outside:10.100.100.1/51253(LOCAL\testuser) to inside:192.168.76.13/8443 duration 0:00:00 bytes 0 Flow closed by inspection (testuser)

Is there any workaround the above mentioned issue?

Thanks in advance,

Dave.

Hello;

Maykol Rojas — Mon, 14 Dec 2015 17:44:05 GMT

Hello;

Explanation For the CoA feature, the redirect ACL filter drops the matching non-HTTP traffic during the redirect processing

Recommended Action Validate the redirect ACL configuration on the ASA. Make sure that the correct filter is used to match the traffic to redirect and does not block the flow that is intended to be allowed through.

http://www.cisco.com/c/en/us/td/docs/security/asa/syslog-guide/syslogs/logmsgs1.html#pgfId-8070351

Seems like there is a misconfiguration in CoA.

Mike.

topic Hello; in Network Security

ASA Non-HTTP connection

Hello;