Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to block HTTPS websites with the ASA 5505?

I have conflicting information.

share|improve this question

Sorta... You cannot use the CSC modules on the ASA5505, all other ASA models can take that. It's required to do real HTTPS inspection (and thus blocking). However, you could configure an ACL on the 'inside' interface that disallows traffic to port 443, which could effectively cut off most HTTPS traffic.

share|improve this answer
    
Would it be possible block a specific website or do I have to shut down 443? – Eric Nov 20 '12 at 14:16
    
You can block by destination IP as well. Since most websites don't change their IPs very often, it should work for a while. You'd have to keep an eye on it. – Chris S Nov 20 '12 at 14:17
    
Thank you. ---- – Eric Nov 20 '12 at 14:18

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.