Cisco Systems ASA 5555-X Network Router User Manual


 
Contents
viii
Cisco ASA Series Firewall CLI Configuration Guide
Configuring a RADIUS Server to Download Per-User Access Control List Names 7-21
Configuring Accounting for Network Access 7-21
Using MAC Addresses to Exempt Traffic from Authentication and Authorization 7-23
Feature History for AAA Rules 7-25
PART
4 Configuring Application Inspection
CHAPTER
9 Getting Started with Application Layer Protocol Inspection 9-1
Information about Application Layer Protocol Inspection 9-1
How Inspection Engines Work 9-1
When to Use Application Protocol Inspection 9-2
Guidelines and Limitations 9-3
Default Settings and NAT Limitations 9-4
Configuring Application Layer Protocol Inspection 9-7
CHAPTER
10 Configuring Inspection of Basic Internet Protocols 10-1
DNS Inspection 10-1
Information About DNS Inspection 10-2
General Information About DNS 10-2
DNS Inspection Actions 10-2
Default Settings for DNS Inspection 10-2
(Optional) Configuring a DNS Inspection Policy Map and Class Map 10-3
Configuring DNS Inspection 10-8
Monitoring DNS Inspection 10-9
FTP Inspection 10-10
FTP Inspection Overview 10-10
Using the strict Option 10-11
Configuring an FTP Inspection Policy Map for Additional Inspection Control 10-12
Verifying and Monitoring FTP Inspection 10-15
HTTP Inspection 10-15
HTTP Inspection Overview 10-15
Configuring an HTTP Inspection Policy Map for Additional Inspection Control 10-16
ICMP Inspection 10-20
ICMP Error Inspection 10-20
Instant Messaging Inspection 10-20
IM Inspection Overview 10-20
Configuring an Instant Messaging Inspection Policy Map for Additional Inspection Control 10-21
IP Options Inspection 10-23