ASA CSC Module - URL blocking issues

brianbono · ‎08-20-2007

Good day again! I need help on these issues below.

I have this issue with the CSC that I have configured with the default global inspection settings. I cannot use my Outlook and I would end up having this log in the CSC:

2007/08/16 15:37:21|Web|user defined|webmail.yyyy.com:443|192.168.100.5|URL Blocking|

I have tried to unblock the “yyyy.com” on the URL blocking but still it didn’t work… how do I go about this? Also, as a default setting YM is blocked but how do I enable YM, just in case the manager or the owner wants to use it? I do get a similar alert if I open the Yahoo Messenger - 2007/08/16 15:37:21|Web|user defined|login.yahoo.com:443|192.168.100.5|URL Blocking|

lastly, if i tried to access our webmail using IE and i get this message on the browser - TrendMicro InterScan for CSC SSM

HTTPS CONNECT to webmail.yyyy.com:443 is denied. CONNECT to port 80 is forbidden.

But I don't have any problem accessing that webmail using Firefox.

Please enlighten on this :)

thanks

wong34539 · ‎08-24-2007

I think you will have to remove the line for the site you want to unblock from the ACL. I you have configured some other ACL for list of allowed sites you will have to put this site in this ACL also. The messnger blocking feature is implemeted in ASA. The command " match [not] protocol {im-yahoo | im-msn}" can be used to enalbe or disable the inspection. Following link may help you

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/inspect.html#wp1479354