Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is it possible to block HTTPS websites with the ASA 5505?

I have conflicting information.

share|improve this question

1 Answer 1

Sorta... You cannot use the CSC modules on the ASA5505, all other ASA models can take that. It's required to do real HTTPS inspection (and thus blocking). However, you could configure an ACL on the 'inside' interface that disallows traffic to port 443, which could effectively cut off most HTTPS traffic.

share|improve this answer
    
Would it be possible block a specific website or do I have to shut down 443? –  Eric Nov 20 '12 at 14:16
    
You can block by destination IP as well. Since most websites don't change their IPs very often, it should work for a while. You'd have to keep an eye on it. –  Chris S Nov 20 '12 at 14:17
    
Thank you. ---- –  Eric Nov 20 '12 at 14:18

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.