Configuring Application Protocol Inspection - Cisco 4700M Configuration Manual

Configuring Application Protocol
Inspection
This chapter describes how to configure application protocol inspection for the
Cisco 4700 Series Application Control Engine (ACE) appliance. Application
protocol inspection provides functionality for several protocols that carry Layer 3
and Layer 4 information in the application payload, require some form of deep
packet inspection of the HTTP protocol, or require File Transfer Protocol (FTP)
request command filtering.
This chapter contains the following major sections:
•
•
•
•
•
•
•
•
•
•
•
•
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
OL-16202-01
Application Protocol Inspection Overview
Application Protocol Inspection Configuration Quick Start Procedures
Configuring a Layer 7 FTP Command Inspection Policy
Configuring a Layer 7 HTTP Deep Inspection Policy
Configuring a Layer 7 SCCP Inspection Policy
Configuring a Layer 7 SIP Inspection Policy
Configuring a Layer 3 and Layer 4 Application Protocol Inspection Traffic
Policy
Configuring a DNS Parameter Map
Configuring an HTTP Parameter Map
Configuring an SCCP Parameter Map
Configuring a SIP Parameter Map
Applying a Service Policy
C H A P T E R
3
3-1