HTTPS INSPECTION

[harisapkota123]

Dear all,

Currently im working with ASA5510 software version  (asa803-k8.bin). I have CSC module installed on it.. I tried to block the website (facebook.com) using (*facebook*). if users try to get to facebook.com using http session it is easily blocked as we needed.. but we found that users are being succeed using https://facebook.com session which was not blocked by ASA. I request you to advise the best solution. Thank you.

Regards

Hari,

[Jennifer Halim]

HTTPS inspection is not supported on CSC module because HTTPS traffic is encrypted traffic hence it is not able to inspect it.

In any case, only the following ports are supposed to be configured to be sent from ASA towards the CSC module:

• FTP connections opened to TCP port 21

• HTTP connections opened to TCP port 80

• POP3 connections opened to TCP port 110

• SMTP connections opened to TCP port 25

All other ports are not supported.