Cisco ASA 5506-X Configuration Manual page 237

Inspection for Management Application
Protocols
The following topics explain application inspection for management application protocols. For
information on why you need to use inspection for certain protocols, and the overall methods for
applying inspection, see
Several common inspection engines are enabled on the ASA by default, but you might need to enable
others depending on your network.
•
•
•
•
•
•
DCERPC Inspection
The following sections describe the DCERPC inspection engine.
•
•
DCERPC Overview
DCERPC is a protocol widely used by Microsoft distributed client and server applications that allows
software clients to execute programs on a server remotely.
This typically involves a client querying a server called the Endpoint Mapper listening on a well known
port number for the dynamically allocated network information of a required service. The client then sets
up a secondary connection to the server instance providing the service. The security appliance allows the
appropriate port number and network address and also applies NAT, if needed, for the secondary
connection.
Getting Started with Application Layer Protocol Inspection, page
DCERPC Inspection, page 10-1
GTP Inspection, page 10-4
RADIUS Accounting Inspection, page 10-11
RSH Inspection, page 10-15
SNMP Inspection, page 10-15
XDMCP Inspection, page 10-17
DCERPC Overview, page 10-1
Configure DCERPC Inspection, page 10-2
C H A P T E R
Cisco ASA Series Firewall CLI Configuration Guide
10
6-1.
10-1