cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to Cisco Firewalls Community


778
Views
0
Helpful
16
Replies
Beginner

Cisco firewall not allowing ngrok.com

when I am visiting ngrok.com I am getting the error "Access to this destination is not allowed due to a possible malware threat"

what could be the issue?

ASA is blocking ngrok software too within the network.

16 REPLIES 16
Enthusiast

Re: Cisco firewall not allowing ngrok.com

Hi,
Are you using Cisco WSA, Its not blocked by ASA may be your proxy is denying this traffic.

HTH
Abheesh
Beginner

Re: Cisco firewall not allowing ngrok.com

no we are not using any proxy and wsa

VIP Advisor

Re: Cisco firewall not allowing ngrok.com

as per the Talos site looks neutral, is the ASA with Firepower ?

 

https://www.talosintelligence.com/

 

 

BB
*** Rate All Helpful Responses ***
Beginner

Re: Cisco firewall not allowing ngrok.com

no we are not using firepower.

this is why I am confused why ASA is blocking, moreover talcos is showing the website as neutral

VIP Advisor

Re: Cisco firewall not allowing ngrok.com

we need more inforamtion about your setup, this error produce internally ? if so how is your traffic flow going outside, in the path from user pc to internet, there is some kind proxy or thread analysis running to get this.

 

BB
*** Rate All Helpful Responses ***
Beginner

Re: Cisco firewall not allowing ngrok.com

User PC----->Access Switch (2960)----->Core Switch (3850)----->ASA

 

There is no proxy and tread analysis

VIP Advisor

Re: Cisco firewall not allowing ngrok.com

After ASA internet ?

is the error you see on browser ?

 

can you give us full screenshot, what IP address this sending this warning.

 

BB
*** Rate All Helpful Responses ***
Beginner

Re: Cisco firewall not allowing ngrok.com

yes, internet is after asa. 

we are seeing this error on browser. Attachment contains the screenshot of the browser.

VIP Advisor

Re: Cisco firewall not allowing ngrok.com

Does your PC have Any Connect Client ?

 

BB
*** Rate All Helpful Responses ***
Beginner

Re: Cisco firewall not allowing ngrok.com

No we don't have any connect. It is not just the one PC that is facing this problem, all PC in network is having same problem.

Highlighted
Enthusiast

Re: Cisco firewall not allowing ngrok.com

Ngrok site uses SSL and if you open the page with http it will be redirected to https. In your case some thing in between is blocking the page itself. Are you using Cisco umbrella..? Can you check nslookup from your PC whether it is resolving properly...?

Beginner

Re: Cisco firewall not allowing ngrok.com

Not using cisco umbrella 

Nslookup is fine giving same ip. check attachment

VIP Advisor

Re: Cisco firewall not allowing ngrok.com

I think for now we are only guessing how your network, based on that we are suggesting. either you have some filters which is part of the network. Since we do not able to reproduce the isse you were mentioned.

 

who is your service ISP provider ? 

 

BB
*** Rate All Helpful Responses ***
Beginner

Re: Cisco firewall not allowing ngrok.com

my ISP is beam (from India)