Filter
Top Products
17-66
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 17 Managing Firewall Inspection Rules
Configuring Protocols and Maps for Inspection
When creating an IM policy map, in the Policy Object Manager, from the Match Condition and Action
tab on the Add and Edit IM Map dialog boxes for ASA 7.2/PIX 7.2, right-click inside the table, then
select Add Row or right-click a row, then select Edit Row. See Configuring IM Maps for ASA 7.2+,
PIX 7.2+ Devices, page 17-64.
Related Topics
• Understanding Map Objects, page 6-72
• Configuring Protocols and Maps for Inspection, page 17-21
Field Reference
Table 17-38 IM Class and Policy Map (ASA 7.2+/PIX 7.2+) Add or Edit Match Condition (and Action)
Dialog Boxes
Element Description
Match Type
Class Name
(Policy Map only)
Enables you to use an existing IM class map or define a new IM class
map.
• Use Specified Values—You want to define the class map on this
dialog box.
• Use Values in Class Map—You want to select an existing IM class
map policy object. Enter the name of the IM class map in the Class
Name field. Click Select to select the map from a list or to create
a new class map object.
Criterion Specifies which criterion of IM traffic to match. The criteria are:
• Filename—Matches the filename from IM file transfer service.
• Client IP Address—Matches the source client IP address.
• Client Login Name—Matches the client login name from IM
service.
• Peer IP Address—Matches the peer, or destination, IP address.
• Peer Login Name—Matches the peer, or destination, login name
from IM service.
• Protocol—Matches IM protocols.
• Service—Matches IM services.
• File Transfer Service Version—Matches the IM file transfer
service version.
Type Specifies whether the map includes traffic that matches or does not
match the criterion. For example, if Doesn’t Match is selected on the
string “example.com,” then any traffic that contains “example.com” is
excluded from the map.
• Matches—Matches the criterion.
• Doesn’t Match—Does not match the criterion.
Action
(Policy Map only)
The action you want the device to take for traffic that matches the
defined criteria.