Cisco ASA 5505 Configuration Manual page 879

Chapter 38 Configuring Inspection for Voice and Video Protocols
–
• SIP Conformance—Tab that lets you configure the SIP conformance settings for SIP.
–
–
Field Masking—Tab that lets you configure the field masking settings for SIP.
•
–
–
Inspections—Tab that shows you the SIP inspection configuration and lets you add or edit.
•
–
–
–
–
–
–
–
–
–
–
Modes
The following table shows the modes in which this feature is available:
Firewall Mode
Routed
•
OL-20339-01
Check RTP packets for protocol conformance—Checks RTP/RTCP packets flowing on the
pinholes for protocol conformance.
Limit payload to audio or video, based on the signaling exchange—Enforces payload type to be
audio/video based on the signaling exchange.
Enable state transition checking—Enables SIP state checking.
Action—Drop packet, Drop Connection, Reset, Log.
Log—Enable or Disable.
Enable strict validation of header fields—Enables validation of SIP header fields.
Action—Drop packet, Drop Connection, Reset, Log.
Log—Enable or Disable.
Inspect non-SIP URIs—Enables non-SIP URI inspection in Alert-Info and Call-Info headers.
Action—Mask or Log.
Log—Enable or Disable.
Inspect server's and endpoint's software version—Inspects SIP endpoint software version in
User-Agent and Server headers.
Action—Mask or Log.
Log—Enable or Disable.
Match Type—Shows the match type, which can be a positive or negative match.
Criterion—Shows the criterion of the SIP inspection.
Value—Shows the value to match in the SIP inspection.
Action—Shows the action if the match condition is met.
Log—Shows the log state.
Add—Opens the Add SIP Inspect dialog box to add a SIP inspection.
Edit—Opens the Edit SIP Inspect dialog box to edit a SIP inspection.
Delete—Deletes a SIP inspection.
Move Up—Moves an inspection up in the list.
Move Down—Moves an inspection down in the list.
Security Context
Transparent Single
• •
Multiple
Context System
—
•
Cisco ASA 5500 Series Configuration Guide using ASDM
SIP Inspection
38-33