question in QOS about NBAR abilities to match some traffic

[Dr.X]

hi all ,

im here to ask about some feature of cisco QOS NBAR ,

as we now http traffic is on port 80

now some users use some proxies

as an example

77.88.66.77 with port 66000 and can bypass the lan proxy

my quesgtion is :

can NBAR detect people who use custome proxies  with different 80 port and estimate that the are using proxies and deny them ??

regards

[Collin Clark]

NBAR will not be able to detect proxies and block them. The ASA-CX (NGFW) and WSA can detect and block remote proxies.

Hope it helps.