Cisco Systems OL-16647-01 Network Router User Manual


  Open as PDF
of 1230
 
24-74
Cisco ASDM User Guide
OL-16647-01
Chapter 24 Configuring Application Layer Protocol Inspection
Inspect Map Field Descriptions
Drop Connections if command recipient count is greater than 100
Drop Connections if body line length is greater than 1000
Drop Connections and log if sender address length is greater than 320
Drop Connections and log if MIME file name length is greater than 255
MIME File Type Filtering—Opens the MIME Type Filtering dialog box to configure MIME file
type filters.
Default Level—Sets the security level back to the default level of Low.
Details—Shows the Parameters and Inspections tabs to configure additional settings.
Modes
The following table shows the modes in which this feature is available:
Add/Edit ESMTP Policy Map (Details)
The Add/Edit ESMTP Policy Map pane lets you configure the security level and additional settings for
ESMTP application inspection maps.
Fields
Name—When adding an ESMTP map, enter the name of the ESMTP map. When editing an ESMTP
map, the name of the previously configured ESMTP map is shown.
Description—Enter the description of the ESMTP map, up to 200 characters in length.
Security Level—Shows the security level and mime file type filtering settings to configure.
Parameters—Tab that lets you configure the parameters for the ESMTP inspect map.
Mask server banner—Enforces banner obfuscation.
Configure Mail Relay—Enables ESMTP mail relay.
Domain Name—Specifies a local domain.
Action—Drop connection or log.
Log—Enable or disable.
Inspections—Tab that shows you the ESMTP inspection configuration and lets you add or edit.
Match Type—Shows the match type, which can be a positive or negative match.
Criterion—Shows the criterion of the ESMTP inspection.
Value—Shows the value to match in the ESMTP inspection.
Action—Shows the action if the match condition is met.
Log—Shows the log state.
Add—Opens the Add ESMTP Inspect dialog box to add an ESMTP inspection.
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
• • • •