inspect HTTPS

snickered · ‎09-28-2009

I'm curious if there is a way to stop tunneling applications out HTTPS with ASA 5500. I know everything is encrypted but is there a way to at least inspect the traffic to make sure it complies with RFC 2818? Perhaps there's another way to provide some security?

dhananjoy chowdhury · ‎09-30-2009

A quick feasible option would be to use WCCP on the ASA and forward all HTTPS traffic to a Squid proxy server and then use the tool ufdbGuard (http://www.urlfilterdb.com/download/software/index.shtml) along with Squid to block traffic.

You can create specific ACL's to redirect traffic with WCCP on ASa.

m-mostafa · ‎04-14-2013

is there another tool to run on windows with squid proxy