Filter
Top Products
7-9
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 7 Managing FlexConfigs
Understanding FlexConfig Policies and Policy Objects
SYS_SYS_OID 0 System object ID (SysObjId) of the device, which is
determined when you add the device to Security
Manager.
Table 7-2 Firewall System Variables
Name Dimension Description
SYS_FPM_INPUT_SP 1 FPM policy map names applied on the interface
corresponding to the entry in the
SYS_FPM_INTERFACE list in the “in” direction.
This data is not configured in Security Manager. It is
obtained from a router’s running configuration and is
used by the IOS_FPM FlexConfig.
SYS_FPM_INTERFACE 1 Interface names.
This data is not configured in Security Manager. It is
obtained from a router’s running configuration and is
used by the IOS_FPM FlexConfig.
SYS_FPM_OUTPUT_SP 1 FPM policy map names applied on the interface
corresponding to the entry in the
SYS_FPM_INTERFACE list in the “out” direction.
This data is not configured in Security Manager. It is
obtained from a router’s running configuration and is
used by the IOS_FPM FlexConfig.
SYS_FW_ACL_IN_NAME 1 Names of ACLs applied to interfaces for traffic
filtering in the inbound direction. Each element has a
one-to-one correspondence with the
SYS_INTERFACE_NAME_LIST variable for Cisco
IOS routers, PIX Firewalls, Firewall Service
Modules, and ASA devices.
Configure firewall access rules to generate values for
this variable.
SYS_FW_ACL_OUT_NAME 1 Names of ACLs applied to interfaces for traffic
filtering in the outbound direction. Each element of
this array has a one-to-one correspondence with
SYS_INTERFACE_NAME_LIST variable for Cisco
IOS routers, PIX Firewalls, Firewall Service
Modules, and ASA devices.
Configure Access Rules policies to generate values
for this variable.
Table 7-1 Device System Variables (Applying to All Device Types) (Continued)
Name Dimension Description