11-10
Cisco ASA Series Firewall ASDM Configuration Guide
Chapter 11 Configuring Inspection of Basic Internet Protocols
DNS Inspection
Step 5 From the Criterion drop-down list, choose one of the following criteria:
• Header Flag:
Set the following Value parameters:
–
Match Option: Equals or Contains. If you choose Header Flag Name, and check multiple flags,
you can set the ASA to match a packet only if all flags are present (Equals) or if any one of the
flags is present (Contains).
–
Match Value: Header Flag Name or Header Flag Value. If you click Header Flag Name, you
can check one or more well-known flag values. If you want to specify a hex value, click the
Header Flag Value radio button, and enter the hex value in the field.
• Type: