Cisco ASA 5505 Configuration Manual page 856

H.323 Inspection
•
Modes
The following table shows the modes in which this feature is available:
Firewall Mode
Routed
•
Add/Edit H.323 Policy Map (Details)
The Add/Edit H.323 Policy Map pane lets you configure the security level and additional settings for
H.323 application inspection maps.
Fields
•
•
•
•
Cisco ASA 5500 Series Configuration Guide using ASDM
38-10
State Checking h225 Enabled
State Checking ras Enabled
Call Party Number Disabled
Call duration Limit Disabled
RTP conformance enforced
Limit payload to audio or video, based on the signaling exchange: no
High
–
State Checking h225 Enabled
State Checking ras Enabled
Call Party Number Enabled
Call duration Limit 1:00:00
RTP conformance enforced
Limit payload to audio or video, based on the signaling exchange: yes
– Phone Number Filtering—Opens the Phone Number Filtering dialog box which lets you
configure the settings for a phone number filter.
– Default Level—Sets the security level back to the default.
Details—Shows the State Checking, Call Attributes, Tunneling and Protocol Conformance, HSI
Group Parameters, and Inspections tabs to configure additional settings.
Security Context
Transparent Single
• •
Name—When adding an H.323 map, enter the name of the H.323 map. When editing an H.323 map,
the name of the previously configured H.323 map is shown.
Description—Enter the description of the H.323 map, up to 200 characters in length.
Security Level—Shows the security level and phone number filtering settings to configure.
State Checking—Tab that lets you configure state checking parameters for the H.323 inspect map.
– Check state transition of H.225 messages—Enforces H.323 state checking on H.225 messages.
Check state transition of RAS messages—Enforces H.323 state checking on RAS messages.
–
Chapter 38 Configuring Inspection for Voice and Video Protocols
Multiple
Context System
• —
OL-20339-01