topic Re: web tunneling software - how does it get past firewall in Network Security https://community.cisco.com/t5/network-security/web-tunneling-software-how-does-it-get-past-firewall/m-p/1112007#M894029 <HTML><HEAD></HEAD><BODY><P>You will have to use the MPF feature on the ASA to block the GoToMyPC traffic.</P><P>Configure the policy-map type like this</P><P>============================================</P><P>policy-map type inspect http GotoMyPC_HTTP</P><P> parameters</P><P> match request uri regex _default_GoToMyPC-tunnel "machinekey"</P><P> drop-connection log</P><P> match request uri regex _default_GoToMyPC-tunnel_2 "[/\\]erc[/\\]Poll"</P><P> drop-connection log</P><P></P><P>================================================</P><P>Also refer to this document</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808c38a6.shtml" target="_blank">http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808c38a6.shtml</A></P><P></P><P>Hope this helps.</P></BODY></HTML> Thu, 06 Nov 2008 05:24:21 GMT dhananjoy chowdhury 2008-11-06T05:24:21Z web tunneling software - how does it get past firewall https://community.cisco.com/t5/network-security/web-tunneling-software-how-does-it-get-past-firewall/m-p/1112006#M894028 <P>hi all, if we use a ASA, application layer firewall, how does things like gotpmypc remote access software manage to tunnel through it, i would of thought the http inspection would block it, </P><P></P><P>what exactly happens ?</P><P></P> Mon, 11 Mar 2019 14:08:17 GMT https://community.cisco.com/t5/network-security/web-tunneling-software-how-does-it-get-past-firewall/m-p/1112006#M894028 carl_townshend 2019-03-11T14:08:17Z Re: web tunneling software - how does it get past firewall https://community.cisco.com/t5/network-security/web-tunneling-software-how-does-it-get-past-firewall/m-p/1112007#M894029 <HTML><HEAD></HEAD><BODY><P>You will have to use the MPF feature on the ASA to block the GoToMyPC traffic.</P><P>Configure the policy-map type like this</P><P>============================================</P><P>policy-map type inspect http GotoMyPC_HTTP</P><P> parameters</P><P> match request uri regex _default_GoToMyPC-tunnel "machinekey"</P><P> drop-connection log</P><P> match request uri regex _default_GoToMyPC-tunnel_2 "[/\\]erc[/\\]Poll"</P><P> drop-connection log</P><P></P><P>================================================</P><P>Also refer to this document</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808c38a6.shtml" target="_blank">http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808c38a6.shtml</A></P><P></P><P>Hope this helps.</P></BODY></HTML> Thu, 06 Nov 2008 05:24:21 GMT https://community.cisco.com/t5/network-security/web-tunneling-software-how-does-it-get-past-firewall/m-p/1112007#M894029 dhananjoy chowdhury 2008-11-06T05:24:21Z