Cisco 4700M Configuration Manual page 185

Chapter 3 Configuring Application Protocol Inspection
The syntax of this command is as follows:
The keywords, arguments, and options are as follows:
•
•
For example, to specify that the Layer 7 class map is to match and perform
application inspection on a specific URL, enter:
host1/Admin(config)# class-map type http inspect HTTP_INSPECT_L7CLASS
host1/Admin(config-cmap-http-insp)# match url whatsnew/latest.*
For example, to use regular expressions to emulate a wildcard search to match on
any .gif or .html file, enter:
host1/Admin(config)# class-map type http inspect match-any
HTTP_INSPECT_L7CLASS
host1/Admin(config-cmap-http-insp)# match url .*.gif
host1/Admin(config-cmap-http-insp)# match url .*.html
To clear a URL match criteria from the class map, enter:
host1/Admin(config-cmap-http-insp)# no match url .*.gif
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
OL-16202-01
[line_number] match url expression
line_number—(Optional) Argument that assists you in editing or deleting
individual match commands. Enter an integer from 2 to 1024 as the line
number. You can enter no line_number to delete long match commands
instead of entering the entire line. The line numbers do not dictate a priority
or sequence for the match statements.
expression—URL, or portion of a URL, to match. The URL string range is
from 1 to 255 characters. Include only the portion of the URL that follows
www.hostname.domain in the match statement. For example, in the URL
www.anydomain.com/latest/whatsnew.html, include only
/latest/whatsnew.html. To match the www.anydomain.com portion, the URL
string can take the form of a URL regular expression. The ACE supports the
use of regular expressions for matching. See
supported characters that you can use in regular expressions.
Note When matching URLs, the period (.) does not have a literal meaning
in regular expressions. Use either brackets ([]) or the backslash (\
character to match this symbol; for example, specify
www[.]xyz[.]com instead of www.xyz.com.
Configuring a Layer 7 HTTP Deep Inspection Policy
Table 3-5 for a list of the
)
3-61