Filter
Top Products
50-18
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter 50 Configuring Inspection for Management Application Protocols
XDMCP Inspection
Modes
The following table shows the modes in which this feature is available:
Add/Edit SNMP Map
Configuration > Global Objects > Inspect Maps > SNMP > Add/Edit SNMP Map (You can get to
this dialog box through various paths.)
The Add/Edit SNMP Map dialog box lets you create a new SNMP map for controlling SNMP application
inspection.
Fields
• SNMP Map Name—Defines the name of the application inspection map.
• SNMP version 1—Enables application inspection for SNMP version 1.
• SNMP version 2 (party based)—Enables application inspection for SNMP version 2.
• SNMP version 2c (community based)—Enables application inspection for SNMP version 2c.
• SNMP version 3—Enables application inspection for SNMP version 3.
Modes
The following table shows the modes in which this feature is available:
XDMCP Inspection
XDMCP inspection is enabled by default; however, the XDMCP inspection engine is dependent upon
proper configuration of the established command.
XDMCP is a protocol that uses UDP port 177 to negotiate X sessions, which use TCP when established.
For successful negotiation and start of an XWindows session, the ASA must allow the TCP back
connection from the Xhosted computer. To permit the back connection, use the established command
on the ASA. Once XDMCP negotiates the port to send the display, The established command is
consulted to verify if this back connection should be permitted.
During the XWindows session, the manager talks to the display Xserver on the well-known port 6000 |
n. Each display has a separate connection to the Xserver, as a result of the following terminal setting.
setenv DISPLAY Xserver:n
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
••••—
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
••••—