Block Firefox usage with Access Control Policy

[matthew.goli1]

Hello,

Running FirePOWER Services Module version 6.2.2.2 on ASA 5525.  

We are attempting to set an access control policy to block the usage of Firefox to browse internet sites.  My rule specifies that the source zone is my INSIDE zone, there is no destination zone defined.  I am matching on the application "Firefox"and performing a "Block with reset" action and logging the event to the event viewer.

The application block is working for normal http traffic, but it is not working for https traffic.  In fact I am not even seeing the https traffic in the event viewer.  What am I overlooking that would allow the module to identify the SSL firefox traffic?

[Marvin Rhoads]

Without an SSL decryption policy in place, the SSL traffic will have things like the user-agent inside the encrypted payload. Thus your Firepower will be unable to inspect it and take the appropriate action (Block, Allow etc.).