Controlling SSL VPN with Cisco Cloud Web Security

[oliprice0003]

We have implemented Cisco Cloud Web Security with the ASA connector and are forwarding all port 80 and 443 traffic to the CCWS tower. We have HTTPS inspection enabled and I was wondering if there was anything we can add in the configuration that would allow us to control (block/allow) SSL VPNs?

[Ashok Sakthivel · Accepted solution]

#Clientless SSL VPN is not supported with Cloud Web Security; be sure to exempt any clientless SSL VPN traffic from the ASA service policy for Cloud Web Security.

Refer: http://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/protect_cloud_web_security.html