Issue In CSC-SSM-10

[Janardhan Meesala]

Dear Experts!!!!

I upgraded my CSC module with IOS 6.6.1125.0.

I studied IOS release guide it tells that it supports HTTPS scanning.

After upgrading some websites are opening with HTTPS????

Please tell me solution for this.

Regards,

Janardhan

[Anu M Chacko]

Hi Janardhan,

Could you clarify the issue that you're facing? Are the HTTPS websites not opening? Do you see this issue with all browsers? Please test with IE, Firefox, etc.

Regards,

Anu

[Janardhan Meesala]

Hi Anu,

I blocked sites like gmail,facebook,etc....

These sites are blocked while opening with http but these sites are opening with HTTPS.

Actually these sites also configured for bloking with HTTPS in CSC.

In all cases i am using IE.

Regards,

Janardhan

[Anu M Chacko]

Hi Janardhanan,

Can you enable TLS in the browser?(Tools->Internet options->Advanced->Use TLS 1.0) and try?

If it does not work, could yu test with Firefox and let me know if that makes a difference?

Regards,

Anu

[Kelvin Willacey]

Have you modified the class map to send https traffic to the CSC?

[Janardhan Meesala]

HI,

Below is the configuration to send traffic to CSC module:

access-list csc-acl extended permit tcp any any eq www

access-list csc-acl extended permit tcp any any eq https

access-list csc-acl extended permit tcp any any eq smtp

access-list csc-acl extended permit tcp any any eq pop3

access-list csc-acl-ftp extended permit tcp any any eq ftp

class-map csc-class

match access-list csc-acl

class-map csc-ftp-class

match access-list csc-acl-ftp

class csc-class

csc fail-open

class csc-ftp-class

csc fail-open

On Tue, Jun 28, 2011 at 1:08 AM, KWillacey <

[Janardhan Meesala]

Dear All !!!!!

Finally Its working...

I upgraded ASA-5510 IOS with 8.4.2.0 then its working.

For reference to all i mentioning IOS versions that support HTTPS filtering.

ASA IOS --->     8.4.2.0

CSC IOS ---->    6.6.1125.0

Regards,

Janardhan

Regards,