Cisco 4700M Configuration Manual page 175

Chapter 3 Configuring Application Protocol Inspection
Table 3-6
Field Name
User-Agent
Via
•
For example, to specify that the Layer 7 class map is to match and perform
application inspection on HTTP headers, enter:
host1/Admin(config)# class-map type http inspect HTTP_INSPECT_L7CLASS
host1/Admin(config-cmap)# match header Host header-value
.mycompanyexample.com
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
OL-16202-01
HTTP/1.1 Header Fields (continued)
header-value expression—Specifies the header value expression string to
compare against the value in the specified field in the HTTP header. The
range is from 1 to 255 alphanumeric characters. There are predefined header
fields, such as Accept-Language, User-Agent, or Host. The ACE supports the
use of regular expressions for matching. Expressions are stored in a header
map in the form header-name: expression. Header expressions allow spaces,
if the spaces are escaped or quoted. See
characters that you can use in regular expressions.
Note When matching data strings, note that the period (.) and question
mark (?) characters do not have a literal meaning in regular
expressions. Use brackets ([]) to match these symbols (for example,
enter www[.]xyz[.]com instead of www.xyz.com). You can also use a
backslash (\) to escape a dot (.) or a question mark (?).
Configuring a Layer 7 HTTP Deep Inspection Policy
Description
Information about the user agent such as a software
program that originates the request. This information
is for statistical purposes, the tracing of protocol
violations, and automated recognition of user agents
so that you can customize responses to avoid
particular user agent limitations.
Used by gateways and proxies to indicate the
intermediate protocols and recipients between the
user agent and the server on requests, and between
the origin server and the client on responses.
Table 3-5 for a list of the supported
3-51