topic HTTPS traffic filtering with regular expressions in Network Security

HTTPS traffic filtering with regular expressions

Janardhan Meesala — Mon, 11 Mar 2019 20:54:16 GMT

Dear Experts!!!

I try to configure URL filtering in ASA (without CSC and external server).

I know how to do HTTPS filtering. But here tell me its working with HTTPS or not???

I am using IOS 8.4(2).

With IOS 8.4.2 HTTPS filtering is supporting with CSC module. Here i want to do the same without CSC module???

Regards,

Janardhan

HTTPS traffic filtering with regular expressions

Janardhan Meesala — Mon, 04 Jul 2011 07:10:40 GMT

Sorry it is a mistake that

i know how to do HTTP filtering. But here tell me its working with HTTPS or not???

Regards,

Janardhan

HTTPS traffic filtering with regular expressions

Kureli Sankar — Mon, 04 Jul 2011 14:31:56 GMT

Janardhan,

For http regex filtering you need to enable http inspection right?

So for https, there is no inspection for https. Packets will be encrypted and we cannot read within the packet so, it is not possible.

With the new code on the CSC module (CSC 6.6.1125.0)

https filtering is possible:

http://www.cisco.com/en/US/docs/security/csc/csc66/release/notes/cscrn66.html#wp339287

-KS

HTTPS traffic filtering with regular expressions

Janardhan Meesala — Tue, 05 Jul 2011 07:07:33 GMT

HI,

I know how to do HTTPS filteirng with CSC module with ios 6.6.1125.0

But its having still bug in this code where which does not support HTTPS filtering with Internet Explorer in Pre-2003 operating systems. Working fine with Later 2003 operating systems of microsoft.

But with Firefox browser its working fine in all OSs.

I studied release notes of 6.6.1125.0 there its clearly says that support of IE.

So there any option to block HTTPS traffic with ASA-CSC-10 with IE browser without external server.

Regards,

Janardhan