HTTPS traffic filtering with regular expressions

[Janardhan Meesala]

Dear Experts!!!

I try to configure URL filtering in ASA (without CSC and external server).

I know how to do HTTPS filtering. But here tell me its working with HTTPS or not???

I am using IOS 8.4(2).

With IOS 8.4.2 HTTPS filtering is supporting with CSC module. Here i want to do the same without CSC module???

Regards,

Janardhan

[Janardhan Meesala]

Sorry it is a mistake that

i know how to do HTTP filtering. But here tell me its working with HTTPS or not???

Regards,

Janardhan

[Kureli Sankar]

Janardhan,

For http regex filtering you need to enable http inspection right?

So for https, there is no inspection for https.  Packets will be encrypted and we cannot read within the packet so, it is not possible.

With the new code on the CSC module (CSC 6.6.1125.0)

https filtering is possible:

http://www.cisco.com/en/US/docs/security/csc/csc66/release/notes/cscrn66.html#wp339287

-KS

[Janardhan Meesala]

HI,

I know how to do HTTPS filteirng with CSC module with ios 6.6.1125.0

But its having still bug in this code where which does not support HTTPS filtering with Internet Explorer in Pre-2003 operating systems. Working fine with Later 2003 operating systems of microsoft.

But with Firefox browser its working fine in all OSs.

I studied release notes of 6.6.1125.0 there its clearly says that support of IE.

So there any option to block HTTPS traffic with ASA-CSC-10 with IE browser without external server.

Regards,

Janardhan