Technical Tip: Inspection of RPC over HTTP protocol traffic

Description

RPC over HTTP is a Microsoft protocol that allows Microsoft Outlook clients to access Microsoft Exchange servers over HTTP.

This article describes the inspection of RPC over HTTP protocol traffic.

Solution

How protocol options profiles and SSL inspection profiles handle RPC (Remote Procedure Calls) over HTTP traffic can be configured separately from normal HTTP traffic.

The configuration is done from CLI.

Configuration in Protocol Options.

config firewall profile-protocol-options
    edit 0
        set rpc-over-http [disable|enable]
    end

Configuration in SSL/SSH inspection.

config firewall ssl-ssh-profile
    edit deep inspection
        set rpc-over-http [disable|enable]
end