cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
340
Views
0
Helpful
1
Replies

ASA CSC Module - URL blocking issues

brianbono
Level 1
Level 1

Good day again! I need help on these issues below.

I have this issue with the CSC that I have configured with the default global inspection settings. I cannot use my Outlook and I would end up having this log in the CSC:

2007/08/16 15:37:21|Web|user defined|webmail.yyyy.com:443|192.168.100.5|URL Blocking|

2007/08/16 15:37:21|Web|user defined|webmail.yyyy.com:443|192.168.100.5|URL Blocking|

2007/08/16 15:37:21|Web|user defined|webmail.yyyy.com:443|192.168.100.5|URL Blocking|

I have tried to unblock the “yyyy.com” on the URL blocking but still it didn’t work… how do I go about this? Also, as a default setting YM is blocked but how do I enable YM, just in case the manager or the owner wants to use it? I do get a similar alert if I open the Yahoo Messenger - 2007/08/16 15:37:21|Web|user defined|login.yahoo.com:443|192.168.100.5|URL Blocking|

lastly, if i tried to access our webmail using IE and i get this message on the browser - TrendMicro InterScan for CSC SSM

HTTPS CONNECT to webmail.yyyy.com:443 is denied. CONNECT to port 80 is forbidden.

But I don't have any problem accessing that webmail using Firefox.

Please enlighten on this :)

thanks

1 Reply 1

wong34539
Level 6
Level 6

I think you will have to remove the line for the site you want to unblock from the ACL. I you have configured some other ACL for list of allowed sites you will have to put this site in this ACL also. The messnger blocking feature is implemeted in ASA. The command " match [not] protocol {im-yahoo | im-msn}" can be used to enalbe or disable the inspection. Following link may help you

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/inspect.html#wp1479354

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: