Can't access any HTTPS websites from inside

[Cameron.Carlson]

I have 3 VLANs setup on two of the VLANs I can not access any https website. HTTP working fine and so does icmp.

VLAN 10, 14, 16

I have an ASA 5520, 2901, Autonomous AP and 3560g sw

I have 3 SSID on the AP. 

10 for Management

14 for users

16 for Guest

Modem to ASA

ASA to Switch

Switch to Router

Switch to AP

10 and 14 go to the router, 16 goes straight to the asa

16 can access all websites

10 and 14 can not.

I have a local DNS on site, with Google public as a secondary.

I did try setting a static DNS on my network IF on my computer and flushed the cache. It made no difference.

SH Run of ASA,Router,and switch are attached.

If anyone has any idea, please let me know.

[Julio E. Moisa]

Hi,

Please let me see the files, you want to reach public https websites? what is the source network?

[Cameron.Carlson]

The files are all attached, are they not view-able?

Every Vlan Source is different. And yes, public websites. 

[Dennis Mink]

if your vlans 10 and 14 can access http or other public IP addresses, its obviously not a routing issue and I would look at your ASA first.

use the packet tracer tool on the ASA and simulate traffic from vlan 10 and 14 to any public up on destination port 443 and see if it gets blocked.

[Cameron.Carlson]

VLAN 10 and 14 are the only two that hit the router and then route out to ASA and then to internet.

VLAN 16 goes straight to ASA and then straight out.