Cisco PIX 525 Especificaciones descargar pdf (Pagina 379)

100

101

21-53

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 21 Applying Application Layer Protocol Inspection

Managing SNMP Inspection

The CLI enters the policy map class configuration mode and the prompt changes accordingly, as follows:

hostname(config-pmap-c)#

Step 5 (Optional) To change the default port used by the security appliance for receiving SMTP traffic, enter

the following command:

hostname(config-pmap-c)# inspect esmtp

Step 6 Return to policy map configuration mode by entering the following command:

hostname(config-pmap-c)# exit

hostname(config-pmap)#

Step 7 Return to global configuration mode by entering the following command:

hostname(config-pmap)# exit

hostname(config)#

Step 8 Apply the policy map globally or to a specific interface by entering the following command:

hostname(config)# service-policy

policy_map_name

[global | interface

interface_ID

Replace policy_map_name with the policy map you configured in Step 3. Identify all the security

appliance interfaces with the global option or identify a specific interface using the name assigned with

the name-if command.

For example, the following command applies the inbound_policy policy map to the outside interface:

hostname(config)# service-policy inbound_policy interface outside

The following command applies the inbound_policy policy map to the all the security appliance

interfaces:

hostname(config)# service-policy inbound_policy global

You enable the SMTP inspection engine as shown in Example 21-10, which enables SMTP traffic on the

default port (25). The service policy is then applied to the outside interface.

Example 21-10 Enabling and Configuring SMTP and ESMTP Inspection

hostname(config)# class-map smtp_port

hostname(config-cmap)# match port tcp eq 25

hostname(config-cmap)# exit

hostname(config)# policy-map inbound_policy

hostname(config-pmap)# class smtp_port

hostname(config-pmap-c)# inspect esmtp 25

hostname(config-pmap-c)# exit

hostname(config)# service-policy inbound_policy interface outside

To enable SMTP inspection for all interfaces, enter the global parameter in place of interface outside.

Managing SNMP Inspection

This section describes how to enable SNMP application inspection and change the default port

configuration. This section includes the following topics:

• SNMP Inspection Overview, page 21-54

• Enabling and Configuring SNMP Application Inspection, page 21-54

1 2 ... 374 375 376 377 378 379 380 381 382 383 384 ... 603 604

Comentarios a estos manuales

Sin comentarios

Cisco PIX 525 Especificaciones Pagina 379

Comentarios a estos manuales