URL filtering and report

Question

I was filter outgoing traffic by url and can view the report of outgoing drop packets.
The problem is want to view report of incoming packets (Response) of outgoing urls. OR Take a report of bandwidth by extension.
Attach1 is some part of "sho run" .
Attach2 is output of "show policy-map interface gigabitEthernet 0/1.115".
Filtering deploy on Router 3845.

Answer 1

Hi Bro
What websites are slow when your LAN users are accessing them? It’s common knowledge that some websites, such as banks, online shopping sites, or other special purpose servers that require extra backend processing before responding to a client request.
Not many people know this, bu the CSC SSM has a non-configurable, 90-second timeout between the client request and the server response to prevent transactions from tying up resources on the CSC SSM for too long. This means that transactions that take a longer time to process will fail.
The workaround is to exclude the site from scanning.
For example, for a site on the outside network with the IP address, 202.188.5.43:
access-list 101 remark ### exempt http traffic inspection by CSC SSM to 202.188.5.43 ###
access-list 101 deny tcp any host 202.188.5.43 eq http
access-list 101 remark ### inspection all other traffic ###
access-list 101 permit tcp any eq http
class-map my_csc_class
match access-list 101
policy-map my_csc_policy
class my_csc_class
csc fail-open
service-policy my_csc_policy interface inside
Furthermore, you could also perform packet capture;
access-list cap_acl permit tcp any host 202.188.5.43
access-list cap_acl permit tcp host 202.188.5.43 any
capture cap access-list cap_acl interface inside
OR
capture csc_cap interface asa_dataplane OR cplane
P/S: If you think this comment is useful, please do rate them nicely :-)