packet inspection

[kp-tkr2014]

Hi, 

Do I need to add inspect http and https  in global_policy 

Thanks

[balaji.bandi]

Firewall point of view yes its good to have inspect policy globally (until there is any use cases specific to environment).

Inspecting HTTP

HTTP inspection policy is implemented to examine and analyze traffic destined to protected servers or clients. It’s main core is to minimize HTTP content to the minimal set of requirements and to look deeply in the application signature for known bad cues mainly using regular expressions. 

for reference :

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/113069-asa-disgi-enai-asdm-00.html