Filter
Top Products
17-43
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 17 Managing Firewall Inspection Rules
Configuring Protocols and Maps for Inspection
You cannot use the Network/Host object named “any.”
Navigation Path
From the Add and Edit GTP Map dialog boxes, click the Add button in the Permit Response table, or
select a row and click the Edit button. See Configuring GTP Maps, page 17-40.
GTP Map Timeouts Dialog Box
Use the GTP Map Timeouts dialog box to set timeout values for a GTP Map.
Navigation Path
From the Add and Edit GTP Map dialog boxes, click the Edit Timeouts button on the Parameters tab.
See Configuring GTP Maps, page 17-40.
Field Reference
GTP Policy Maps Add or Edit Match Condition and Action Dialog Boxes
Use the Add or Edit Match Condition and Action dialog boxes to define the match criterion, value, and
action for a GTP policy map.
The fields on this dialog box change based on the criterion you select.
Navigation Path
In the Policy Object Manager, from the Match Condition and Action tab on the Add and Edit GTP Map
dialog box, right-click inside the table, then select Add Row or right-click a row, then select Edit Row.
See Configuring GTP Maps, page 17-40.
Related Topics
• Understanding Map Objects, page 6-72
Table 17-22 GTP Map Timeouts Dialog Box
Element Description
GSN Timeout The period of inactivity (hh:mm:ss) after which a GSN is removed. The
default is 30 minutes. Enter 0 to never tear down immediately.
PDP Context Timeout The maximum period of time allowed (hh:mm:ss) before beginning to
receive the PDP context. The default is 30 minutes. Enter 0 to specify
no limit.
Request Queue Timeout The maximum period of time allowed (hh:mm:ss) before beginning to
receive the GTP message. The default is 60 seconds. Enter 0 to specify
no limit.
Signaling Connections
Timeout
The period of inactivity (hh:mm:ss) after which the GTP signaling is
removed. The default is 30 minutes. Enter 0 to not remove the signal.
Tunnel Timeout The period of inactivity (hh:mm:ss) after which the GTP tunnel is torn
down. The default is 60 seconds (when a Delete PDP Context Request
is not received). Enter 0 to never tear down immediately.
T3 Response Timeout The maximum wait time for a response before removing the
connection.