Cisco ASA 5506-X Configuration Manual page 211

Chapter 8 Inspection for Voice and Video Protocols
•
Configure RTSP Inspection
RTSP inspection is enabled by default. You need to configure it only if you want non-default processing.
If you want to customize RTSP inspection, use the following process.
Procedure
Configure RTSP Inspection Policy Map, page 8-19
Step 1
Configure the RTSP Inspection Service Policy, page 8-21
Step 2
Configure RTSP Inspection Policy Map
You can create an RTSP inspection policy map to customize RTSP inspection actions if the default
inspection behavior is not sufficient for your network.
When defining traffic matching criteria, you can either create a class map or include the match
statements directly in the policy map. The following procedure explains both approaches.
Before You Begin
Some traffic matching options use regular expressions for matching purposes. If you intend to use one
of those techniques, first create the regular expression or regular expression class map.
Procedure
(Optional) Create an RTSP inspection class map by performing the following steps.
Step 1
A class map groups multiple traffic matches.You can alternatively identify match commands directly in
the policy map. The difference between creating a class map and defining the traffic match directly in
the inspection policy map is that the class map lets you create more complex match criteria, and you can
reuse class maps.
To specify traffic that should not match the class map, use the match not command. For example, if the
match not command specifies the string "example.com," then any traffic that includes "example.com"
does not match the class map.
For the traffic that you identify in this class map, you specify actions to take on the traffic in the
inspection policy map.
If you want to perform different actions for each match command, you should identify the traffic directly
in the policy map.
a.
You can configure NAT for Apple QuickTime 4 or RealPlayer. Cisco IP/TV only works with NAT
if the Viewer and Content Manager are on the outside network and the server is on the inside
network.
Create the class map by entering the following command:
hostname(config)# class-map type inspect rtsp [match-all | match-any] class_map_name
hostname(config-cmap)#
Cisco ASA Series Firewall CLI Configuration Guide
RTSP Inspection
8-19