Inbound Allow ACL when http headers inspection is true.

Question

Hello,
I have a request to make the following work on an asa 5515 deployment and I'm receiving a lot of conflicting information about how to implement the solution.
I have an external provider that requires access to an internal non-ssl webpage. They are unable to provide IP address details to lock down the ACL. They have asked if we can allow access based on http-header-inspection within the request.
I believe this is possible using a class map to run the regex search for whatever he header string might be some form of AND rule such as;
(In english)
if outside->inside ACL ANY to HOST TCP 80 is true
if classmap regex is true
Then allow access.
Can you advise what type of technology would be required to get this working? If it is possible with the current 5515 technology what would you advise the answer is (or can you point me in the right direction to read the answer)?

Answer 1

I will give this another test as soon as I can, I'm not sure I need to make the class CDN_REGEX_MAP, I think I could simply place the 'match not request header regex CDNHEADER' in the inspect policy. I will let you know how it goes. For sake of completeness I've included my code.
Thanks,
regex CDNHEADER "someheader"
class-map type regex match-any CDN_REGEX_MAP
           match regex CDNHEADER
class-map type inspect http match-all DENYCDNCLASS
           match not request header regex class CDN_REGEX_MAP
policy-map type inspect http CDNPOLICYMAP
           class DENYCDNCLASS
reset log
access-list OUTSIDE_MPF extended permit tcp any 1.1.1.1 eq 80
class-map OUTSIDEMPF-CMAP
           match access-list OUTSIDE_MPF
policy-map outside_policy
class OUTSIDEMPF-CMAP
inspect http CDNPOLICYMAP
service-policy outside_policy interface outside