Filter
Top Products
17-14
Cisco ASA Series Firewall CLI Configuration Guide
Chapter 17 Configuring the TLS Proxy for Encrypted Voice Inspection
Configuring the TLS Proxy for Encrypted Voice Inspection
Command Purpose
Step 1
hostname(config)# class-map class_map_name
Example:
ciscoasa(config)# class-map sec_skinny
Configures the secure Skinny class of traffic to
inspect.
Where class_map_name is the name of the Skinny
class map.
Step 2
ciscoasa(config-cmap)# match port tcp eq 2443
Matches the TCP port 2443 to which you want to
apply actions for secure Skinny inspection
Step 3
ciscoasa(config-cmap)# exit
Step 4
hostname(config)# policy-map type inspect skinny
policy_map_name
Example:
ciscoasa(config)# policy-map type inspect skinny
skinny_inspect
Defines special actions for Skinny inspection
application traffic.
Step 5
ciscoasa(config-pmap)# parameters
ciscoasa(config-pmap-p)# ! Skinny inspection
parameters
Specifies the parameters for Skinny inspection.
Parameters affect the behavior of the inspection
engine.
The commands available in parameters
configuration mode depend on the application.
Step 6
ciscoasa(config-pmap-p)# exit Exits from Policy Map configuration mode.
Step 7
hostname(config)# policy-map name
Example:
ciscoasa(config)# policy-map global_policy
Configure the policy map and attach the action to the
class of traffic.
Step 8
ciscoasa(config-pmap)# class inspection_default
Specifies the default class map.
The configuration includes a default Layer 3/4 class
map that the ASA uses in the default global policy.
It is called inspection_default and matches the
default inspection traffic,
Step 9
ciscoasa(config-pmap-c)# inspect skinny skinny_map
Example:
ciscoasa(config-pmap-c)# inspect skinny
skinny_inspect
Enables SCCP (Skinny) application inspection.
Step 10
ciscoasa(config-pmap)# class classmap_name
Example:
ciscoasa(config-pmap)# class sec_skinny
Assigns a class map to the policy map where you can
assign actions to the class map traffic.
Step 11
ciscoasa(config-pmap-c)# inspect skinny skinny_map
tls-proxy proxy_name
Example:
ciscoasa(config-pmap-c)# inspect skinny
skinny_inspect tls-proxy my_proxy
Enables TLS proxy for the specified inspection
session.
Step 12
ciscoasa(config-pmap-c)# exit
Exits from the Policy Map configuration mode.
Step 13
ciscoasa(config)# service-policy policymap_name
global
Example:
ciscoasa(config)# service-policy global_policy
global
Enables the service policy on all interfaces.