Error "Malicious Request" on ESA when accessing some part of WebUI

[REJR77]

Hi,

From time to time we get this kind of message when accessing some parts of the webUI: (for example when accessing the Spam Quarantine from Message tracking

Malicious Request
Error     —     The request appears to be malicious.

The system has detected malicious activity in the last request. The incident has been logged.

Return to the default screen.

Do you already get this message and what is the reason?

Regards

Romain

[Libin Varghese]

Romain,

I see multiple internal defects were filed for this error on older releases of Async OS.

Its listed as an error that appears intermittently for reasons such as clicking on a link before the page is loaded completely.

Thanks

Libin Varghese

[MartijnVeldman]

We have this issue Too, on AsyncOS 14,0.0-692  when we select RAT table and then all

[Edouard45100]

Hi,

We've got this issue too on AsyncOS 15.0.0-104 with all web browsers.

[MartijnVeldman]

Go to System Administration / General Setting .
Turn-off : Usage Analytics.  

Basically ESA/SMA / VSA (asyncOS machines) are trying to tell cisco what buttons you are pressing on the machine.  ESA/SMA tries to connect to an external source which It is not allowed to as It is probably in a DMZ.
My company allready complained to Cisco about It. (It is actually mentioned in the release notes)

Monitoring Web Usage Analytics
Usage Analytics is used to provide insight into your site activity data for analytical statistics. If Usage Analytics is enabled, the appliance collects the feature usage data of the appliance on the new web interface. The usage statistics are used to analyze and provide insight to improve the user experience of the appliance.

Procedure
Step 1

[New Web Interface Only] On the Security Management appliance, click to load the legacy web interface.

Step 2

Choose Management Appliance > System Administration > General Settings.

Step 3

Click on Edit Settings.

Step 4

Select the Enable check box in the Usage Analytics field.

Step 5

Submit and commit your changes.