topic Cisco ASA + AIP SSM url https filtering in Network Security

Cisco ASA + AIP SSM url https filtering

superlubis — Tue, 12 Mar 2019 00:30:25 GMT

Can cisco block/filter https url such a https://www.cisco.com with inspect map or AP-SSM?

From Whaat i know is asa need third party like websense, to block. https url.

Thx

Cisco ASA + AIP SSM url https filtering

Julio Carvajal — Fri, 30 Nov 2012 01:12:53 GMT

Hello,

It can be done locally using the MPF ( with the use of regex and a layer 7 http inspection policy)

The AIP-SSM provides security to your network by using different mechanism like signature checks, global correlation, anomaly detection,etc.

Now what you might want to use is the CSC-SSM module that provides you web filtering ( trend-micro)

Finally an external websense or any other kind of http url filtering device will do it.

Regards,

Cisco ASA + AIP SSM url https filtering

superlubis — Fri, 30 Nov 2012 01:24:51 GMT

if user browse https sites thats mean he/she use port https right, i dont see https inspection in cisco asa. I only see http, ftp, dns, etc. so we cant use MPF because its only support http. correct me if im wrong

Cisco ASA + AIP SSM url https filtering

Julio Carvajal — Fri, 30 Nov 2012 03:33:52 GMT

Hello Ibrahim, You will need to use the CSC-SSM module on the ASA or an external server for filter HTTPS..

Exactly

Regards