<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: csc ssm not filter https traffic ? in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/csc-ssm-not-filter-https-traffic/m-p/1407742#M767848</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;HTTPS filtering is not supported on the CSC AFAIK; the guide reads:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN class="content"&gt;"Traffic moving via HTTPS cannot be scanned for viruses and other threats by the CSC SSM software." &lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;A class="jive-link-external-small" href="http://ciscosystems.com/en/US/docs/security/csc/csc63/administration/guide/csc4.html"&gt;http://ciscosystems.com/en/US/docs/security/csc/csc63/administration/guide/csc4.html&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Also I think MPF (regex matching) does not support HTTPS either, as stated here:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;A class="jive-link-external-small" href="http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080940c5a.shtml"&gt;http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080940c5a.shtml&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I think your only option would be to integrate your firewall with websense or N2H2.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;If the website IPs are static (and less is number), you may do a lookup for them and block 443 access to them using access-lists.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Please rate if helpful.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Regards&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Farrukh&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Sun, 07 Feb 2010 17:26:05 GMT</pubDate>
    <dc:creator>Farrukh Haroon</dc:creator>
    <dc:date>2010-02-07T17:26:05Z</dc:date>
    <item>
      <title>csc ssm not filter https traffic ?</title>
      <link>https://community.cisco.com/t5/network-security/csc-ssm-not-filter-https-traffic/m-p/1407741#M767836</link>
      <description>&lt;P&gt;Hi all,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; i have block sites in csc ssm via http blocking ,but those site can open via https so how can we block sites ,pls ur suggestion may help u .&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Regards&lt;/P&gt;&lt;P&gt;Mak pak&lt;/P&gt;</description>
      <pubDate>Mon, 11 Mar 2019 17:05:05 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/csc-ssm-not-filter-https-traffic/m-p/1407741#M767836</guid>
      <dc:creator>mpak12345</dc:creator>
      <dc:date>2019-03-11T17:05:05Z</dc:date>
    </item>
    <item>
      <title>Re: csc ssm not filter https traffic ?</title>
      <link>https://community.cisco.com/t5/network-security/csc-ssm-not-filter-https-traffic/m-p/1407742#M767848</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;HTTPS filtering is not supported on the CSC AFAIK; the guide reads:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN class="content"&gt;"Traffic moving via HTTPS cannot be scanned for viruses and other threats by the CSC SSM software." &lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;A class="jive-link-external-small" href="http://ciscosystems.com/en/US/docs/security/csc/csc63/administration/guide/csc4.html"&gt;http://ciscosystems.com/en/US/docs/security/csc/csc63/administration/guide/csc4.html&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Also I think MPF (regex matching) does not support HTTPS either, as stated here:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;A class="jive-link-external-small" href="http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080940c5a.shtml"&gt;http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080940c5a.shtml&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I think your only option would be to integrate your firewall with websense or N2H2.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;If the website IPs are static (and less is number), you may do a lookup for them and block 443 access to them using access-lists.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Please rate if helpful.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Regards&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Farrukh&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Sun, 07 Feb 2010 17:26:05 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/csc-ssm-not-filter-https-traffic/m-p/1407742#M767848</guid>
      <dc:creator>Farrukh Haroon</dc:creator>
      <dc:date>2010-02-07T17:26:05Z</dc:date>
    </item>
  </channel>
</rss>

