ASA blocking SSTP

[nathan.welch]

Hello All,

Got a question.  We are having issues with users not being able to connect to a VPN connection using SSTP.  I have ruled out that it is our firewall.  I connected using another connection outside of our network and it works perfectly.  So, in our ASA i have acl's for outbound traffic.  I was curious if the ASA is inspecting or not inspecting this traffic so it in turn will block it?

[Vibhor Amrodia]

Hi,

SSTP works on Port TCP 443 and is encrypted so opening port 443 should be enough to allow this traffic through the ASA device outbound.

Refer:-

http://www.windowsecurity.com/articles-tutorials/firewalls_and_VPN/Secure-Socket-Tunneling-Protocol.html

https://technet.microsoft.com/en-us/library/dd458955%28v=ws.10%29.aspx

Thanks and Regards,

Vibhor Amrodia