topic Issue In CSC-SSM-10 in Network Security

Issue In CSC-SSM-10

Janardhan Meesala — Mon, 11 Mar 2019 20:51:16 GMT

Dear Experts!!!!

I upgraded my CSC module with IOS 6.6.1125.0.

I studied IOS release guide it tells that it supports HTTPS scanning.

After upgrading some websites are opening with HTTPS????

Please tell me solution for this.

Regards,

Janardhan

Issue In CSC-SSM-10

Anu M Chacko — Mon, 27 Jun 2011 13:50:06 GMT

Hi Janardhan,

Could you clarify the issue that you're facing? Are the HTTPS websites not opening? Do you see this issue with all browsers? Please test with IE, Firefox, etc.

Regards,

Anu

Issue In CSC-SSM-10

Janardhan Meesala — Mon, 27 Jun 2011 14:01:18 GMT

Hi Anu,

I blocked sites like gmail,facebook,etc....

These sites are blocked while opening with http but these sites are opening with HTTPS.

Actually these sites also configured for bloking with HTTPS in CSC.

In all cases i am using IE.

Regards,

Janardhan

Issue In CSC-SSM-10

Anu M Chacko — Mon, 27 Jun 2011 14:49:25 GMT

Hi Janardhanan,

Can you enable TLS in the browser?(Tools->Internet options->Advanced->Use TLS 1.0) and try?

If it does not work, could yu test with Firefox and let me know if that makes a difference?

Regards,

Anu

Issue In CSC-SSM-10

Kelvin Willacey — Mon, 27 Jun 2011 19:38:39 GMT

Have you modified the class map to send https traffic to the CSC?

Re: Issue In CSC-SSM-10

Janardhan Meesala — Tue, 28 Jun 2011 04:08:45 GMT

HI,

Below is the configuration to send traffic to CSC module:

access-list csc-acl extended permit tcp any any eq www

access-list csc-acl extended permit tcp any any eq https

access-list csc-acl extended permit tcp any any eq smtp

access-list csc-acl extended permit tcp any any eq pop3

access-list csc-acl-ftp extended permit tcp any any eq ftp

class-map csc-class

match access-list csc-acl

class-map csc-ftp-class

match access-list csc-acl-ftp

class csc-class

csc fail-open

class csc-ftp-class

csc fail-open

On Tue, Jun 28, 2011 at 1:08 AM, KWillacey <

Re: Issue In CSC-SSM-10

Janardhan Meesala — Tue, 28 Jun 2011 12:45:38 GMT

Dear All !!!!!

Finally Its working...

I upgraded ASA-5510 IOS with 8.4.2.0 then its working.

For reference to all i mentioning IOS versions that support HTTPS filtering.

ASA IOS ---> 8.4.2.0

CSC IOS ----> 6.6.1125.0

Regards,

Janardhan

Regards,