Filter
Top Products
17-76
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 17 Managing Firewall Inspection Rules
Configuring Protocols and Maps for Inspection
Configuring ScanSafe Maps
Use the Add or Edit ScanSafe Map dialog boxes to define maps for ScanSafe inspection. A ScanSafe
policy map lets you change the default configuration values used for ScanSafe inspection.
The fields on this dialog box change, depending upon whether you are creating a class map or a policy
map.
Navigation Path
Select Manage > Policy Objects, then select Maps > Policy Maps > Inspect > ScanSafe from the
Object Type selector. Right-click inside the work area, then select New Object or right-click a row and
select Edit Object.
Related Topics
• Understanding Map Objects, page 6-72
• Configuring Protocols and Maps for Inspection, page 17-21
Field Reference
Check for Protocol Violation
Action
Whether to check for NETBIOS protocol violations. If you select this
option, select the action you want to take when violations occur.
Category The category assigned to the object. Categories help you organize and
identify rules and objects. See Using Category Objects, page 6-12.
Allow Value Override per
Device
Overrides
Edit button
Whether to allow the object definition to be changed at the device level.
For more information, see Allowing a Policy Object to Be Overridden,
page 6-18 and Understanding Policy Object Overrides for Individual
Devices, page 6-17.
If you allow device overrides, you can click the Edit button to create,
edit, and view the overrides. The Overrides field indicates the number
of devices that have overrides for this object.
Table 17-44 Add or Edit NetBIOS Map Dialog Boxes (Continued)
Element Description
Table 17-45 ScanSafe Add Match Condition and Action Dialog Box
Element Description
Parameters
Transport Protocol Allows you to select either HTTPS or HTTP.
For HTTPS, the allowed range of values is 1-65535.
For HTTP, the allowed range of values is 1-65535. The default value is
8080.
Default User Name The default user name for the ScanSafe server
Default Group Name The default group name for the ScanSafe server