Cisco PIX 525 Especificaciones descargar pdf (Pagina 335)

100

101

21-9

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 21 Applying Application Layer Protocol Inspection

Applying Application Inspection to Selected Traffic

hostname(config-http-map)# strict-http

hostname(config-http-map)#

Step 3 Return to global configuration mode:

hostname(config-http-map)# exit

hostname(config)#

Defining Actions with a Policy Map

You use a policy map to associate a traffic class map with a specific action, such as application inspection

for a particular protocol. To define a policy map, assign a name to the policy with the policy-map

command and then list one or more traffic class maps and one or more actions that should be taken on

packets that belong to the given traffic class.

Note A packet is assigned to the first matching traffic class in the policy map.

To create a policy map by associating an action with a traffic class, perform the following steps:

Step 1 Name the policy map by entering the following command:

hostname(config)# policy-map

policy_map_name

For example, the following command creates or modifies the http_policy policy map:

(config)# policy-map http_policy

The CLI enters the policy map configuration mode and the prompt changes accordingly, as follows:

hostname(config-pmap)#

Step 2 Specify one or more traffic classes to be included in the traffic policy, as in the following example:

hostname(config-pmap)# class

class_map_name

For example, the following command creates the http_port policy map:

hostname(config-pmap)# class http_port

The CLI enters the class map configuration mode and the prompt changes accordingly, as follows:

hostname(config-pmap-c)#

Step 3 Enable application inspection by entering the following command:

hostname(config-pmap-c)# inspect

protocol

application_inspection_map

Use application_inspection_map if you are enabling a protocol that uses an application map for setting

configurable parameters. For example, the following command enables HTTP application inspection

using the parameters defined using the http_traffic application inspection map.

hostname(config-pmap-c)# inspect http http_traffic

Step 4 To return to policy map configuration mode, enter the following command:

hostname(config-pmap-c)# exit

hostname(config-pmap)#

1 2 ... 330 331 332 333 334 335 336 337 338 339 340 ... 603 604

Comentarios a estos manuales

Sin comentarios

Cisco PIX 525 Especificaciones Pagina 335

Comentarios a estos manuales