topic Is it possible to perform 'http to https' redirects from ASA ? in Network Security

Is it possible to perform 'http to https' redirects from ASA ?

Zubair.Sayed_2 — Tue, 12 Mar 2019 00:17:56 GMT

Hi all,

We recently had some penetration testing done on one of our servers (which has a public front end), and a major issue that was found is that users are able to authenticate without using HTTPS.

I know that we can configure http to https redirects on the server using IIS but we would like to try and get this redirected before the traffic gets to the server.

Browsing some past posts on the forum I found this:

"The ASA can only redirect HTTP/HTTPs traffic to a websense or secure computing smartfilter (owned by McAfee)."

Is it possible to redirect traffic at the ASA as we do not have a websense or smartfilter server in place?

Thanks

Is it possible to perform 'http to https' redirects from ASA ?

Jennifer Halim — Fri, 02 Nov 2012 12:17:42 GMT

No, unfortunately this is not supported feature on the ASA. You might want to perform the redirection on the server itself.

Also, in regards to the statement: "The ASA can only redirect HTTP/HTTPs traffic to a websense or secure computing smartfilter (owned by McAfee).", this is to actually redirect all HTTP/HTTPS traffic to an external URL filtering server to perform URL filtering, so it's not the redirect feature that you are after.

Is it possible to perform 'http to https' redirects from ASA ?

Zubair.Sayed_2 — Fri, 02 Nov 2012 13:15:06 GMT

Jennifer,

Thank you for clearing this up.

Much appreciated.

Zubair

Is it possible to perform 'http to https' redirects from ASA ?

david.tran — Fri, 02 Nov 2012 13:40:56 GMT

if you want to do something like this, get a real firewall like Checkpoint or Juniper

Is it possible to perform 'http to https' redirects from ASA ?

Zubair.Sayed_2 — Fri, 02 Nov 2012 14:54:05 GMT

Nice one David,

Strange though why Cisco has not built these features in the ASA's........