ASA 5550 Block SIP traffic and proxy (hotspot shield etc...)

[hariskhan218]

Hi ,

    I want to block SIP traffic from inside to outside (my public ip address gets black listed due to sip traffic).Can somebody help me with that.

Also i want to block this proxy websites and proxy clients like hotspot shield etc so that no body could make outside VPN connection to access blocked websites on network.

[erkostla]

Do you have CX or a FirePOWER Services module, or just an ASA?

[hariskhan218]

I have just ASA 5550.There is not an option to install IPS module in that as well.

[Nilo Noguera]

Hi Haris,

You can configure Cisco Cloud Web Security with a Cisco ASA 5550 Adaptive Security Appliance.

Cisco Cloud Web Security (formerly known as ScanSafe) services keep malware off your corporate network and more effectively control and secure web usage. Each subscription of Cisco Cloud Web Security purchased through Cisco Global Price List consists of following services:

* Web Security providing anti-malware protection and web content analysis

* Web Filtering providing application visibility and Web Usage Controls

* Secure Mobility providing seamless integration with Cisco AnyConnect client

You can order this using the part number top level part number CWS-LIC= (Cisco Cloud Web Security) and then indicate the number of users and you may choose from three options for the duration of the service: 1 year, 3 years and 5 years subscriptions. Please note that the minimum number of users that you can order is 25.

CWS-1Y-S1 (Cisco Cloud Web Security, 1YR, 25-199 Users)

Duration: 12 Month(s) for USD 69.00/user

CWS-3Y-S1 (Cisco Cloud Web Security, 3YR, 25-199 Users)

Duration: 36 Month(s) for USD 156.00/user

Please note that Sizing for Cloud Web Security (CWS) is based on named users. This isn't concurrent users but total number of users who may browse the internet.

Cisco Cloud Web Security can be evaluated for 30 days with up to 25 users. To request this, PO for zero should be submitted together with Customer Technical Contact Information Collection Web Form. The filled form should be sent to CWS Sales Admin via the ipss-salesoperations alias (ipss-salesoperations@cisco.com) and they will then provision the account within a few days and send all the relevant details to the customer. A Technical Account Manager (TAM) will usually also be assigned to assist the customer with the deployment and get them up and running.

NOTE: A security PSS/CSE will need to be contacted for the PO.

For configuring Cisco Cloud Web Security with a Cisco ASA 5550 Adaptive Security Appliance, you can check the link below:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/asdm71/firewall/asdm_71_firewall_config.pdf

Please check the links below for your reference(s):

Cisco Cloud Web Security Ordering Guide

http://www.cisco.com/en/US/partner/prod/collateral/vpndevc/ps10142/ps11720/cloud_web_security_ordering_guide.pdf

Cisco Cloud Web Security

http://www.cisco.com/en/US/products/ps11720/

Cisco Cloud Web Security Data Sheet

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps10142/ps11720/data_sheet_c78-729637.html

Cisco ASA and Cloud Web Security

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5708/ps5709/ps12726/whitepaper_C11-715169_ns1194_Networking_Solutions_White_Paper.html

Best regards,

"Nilz"

Nilo Noguera

.:|:.:|:. Security Specialist, Cisco Global Virtual Engineering - Cisco Partner Help

http://www.cisco.com/web/partners/tools/ph.html