https://community.cisco.com/t5/network-security/block-firefox-usage-with-access-control-policy/m-p/3350492#M925899 <P>Without an SSL decryption policy in place, the SSL traffic will have things like the user-agent inside the encrypted payload. Thus your Firepower will be unable to inspect it and take the appropriate action (Block, Allow etc.).</P> Sun, 18 Mar 2018 15:01:06 GMT Marvin Rhoads 2018-03-18T15:01:06Z https://community.cisco.com/t5/network-security/block-firefox-usage-with-access-control-policy/m-p/3349520#M925898 <P>Hello,</P> <P>&nbsp;</P> <P>Running&nbsp;FirePOWER Services Module version&nbsp;6.2.2.2 on ASA 5525.&nbsp;&nbsp;</P> <P>&nbsp;</P> <P>We are attempting to set an access control policy to block the usage of Firefox to browse internet sites.&nbsp; My rule specifies that the source zone is my INSIDE zone, there is no destination zone defined.&nbsp; I am matching on the application "Firefox"and performing a "Block with reset" action and logging the event to the event viewer.</P> <P>&nbsp;</P> <P>The application block is working for normal http traffic, but it is not working for https traffic.&nbsp; In fact I am not even seeing the https traffic in the event viewer.&nbsp; What am I overlooking that would allow the module to identify the SSL firefox traffic?</P> Fri, 21 Feb 2020 15:31:18 GMT https://community.cisco.com/t5/network-security/block-firefox-usage-with-access-control-policy/m-p/3349520#M925898 matthew.goli1 2020-02-21T15:31:18Z https://community.cisco.com/t5/network-security/block-firefox-usage-with-access-control-policy/m-p/3350492#M925899 <P>Without an SSL decryption policy in place, the SSL traffic will have things like the user-agent inside the encrypted payload. Thus your Firepower will be unable to inspect it and take the appropriate action (Block, Allow etc.).</P> Sun, 18 Mar 2018 15:01:06 GMT https://community.cisco.com/t5/network-security/block-firefox-usage-with-access-control-policy/m-p/3350492#M925899 Marvin Rhoads 2018-03-18T15:01:06Z