when I am visiting ngrok.com I am getting the error "Access to this destination is not allowed due to a possible malware threat"
what could be the issue?
ASA is blocking ngrok software too within the network.
as per the Talos site looks neutral, is the ASA with Firepower ?
no we are not using firepower.
this is why I am confused why ASA is blocking, moreover talcos is showing the website as neutral
we need more inforamtion about your setup, this error produce internally ? if so how is your traffic flow going outside, in the path from user pc to internet, there is some kind proxy or thread analysis running to get this.
After ASA internet ?
is the error you see on browser ?
can you give us full screenshot, what IP address this sending this warning.
No we don't have any connect. It is not just the one PC that is facing this problem, all PC in network is having same problem.
Ngrok site uses SSL and if you open the page with http it will be redirected to https. In your case some thing in between is blocking the page itself. Are you using Cisco umbrella..? Can you check nslookup from your PC whether it is resolving properly...?
I think for now we are only guessing how your network, based on that we are suggesting. either you have some filters which is part of the network. Since we do not able to reproduce the isse you were mentioned.
who is your service ISP provider ?