https://community.cisco.com/t5/network-security/how-to-configure-https-inspection-on-asa/m-p/2575058#M197965 <P>I need to know&nbsp;how to configure HTTPS inspection on ASA ?</P><P>All i can find is http inspection and it seems that I can't add 'inspect https' command ? so what i can do ?</P> Tue, 12 Mar 2019 05:20:30 GMT AboudMokh 2019-03-12T05:20:30Z https://community.cisco.com/t5/network-security/how-to-configure-https-inspection-on-asa/m-p/2575058#M197965 <P>I need to know&nbsp;how to configure HTTPS inspection on ASA ?</P><P>All i can find is http inspection and it seems that I can't add 'inspect https' command ? so what i can do ?</P> Tue, 12 Mar 2019 05:20:30 GMT https://community.cisco.com/t5/network-security/how-to-configure-https-inspection-on-asa/m-p/2575058#M197965 AboudMokh 2019-03-12T05:20:30Z https://community.cisco.com/t5/network-security/how-to-configure-https-inspection-on-asa/m-p/2575059#M197966 <P>There is no HTTPS-inspection on the ASA itself. It can be done with the help of the ASA-CX-module or in the future with the FirePOWER module.</P><P>Until then, or if you don't want to spend extra money on the module-licenses, you can do the following if you are talking about inbound HTTPS to your own server:</P><OL><LI>Place a reverse-proxy (like nginx) in a DMZ on your ASA</LI><LI>Terminate the incoming HTTPS-session on the reverse-proxy and forward it as HTTP to a server on a different ASA-interface.</LI><LI>Both on the reverse-proxy and on the ASA you now can use HTTP-inspections.</LI></OL><P>If you have outbound HTTPS, then you could install a proxy-server that can inspect HTTPS-traffic. A Cisco solution for that would be the Web security Appliance WSA.</P> Wed, 14 Jan 2015 11:59:39 GMT https://community.cisco.com/t5/network-security/how-to-configure-https-inspection-on-asa/m-p/2575059#M197966 Karsten Iwen 2015-01-14T11:59:39Z