Description - Cisco 4700M Configuration Manual

Configuring a Layer 7 HTTP Deep Inspection Policy
Adding a Layer 7 HTTP Deep Packet Inspection Policy Map Description
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
3-64
The keyword and arguments are as follows:
http all-match—Specifies the policy map that initiates the deep packet
•
inspection of the HTTP protocol by the ACE. The ACE attempts to match all
specified conditions against the matching classification and executes the
actions of all matching classes until it encounters a deny for a match request.
map_name—Name assigned to the policy map. Enter an unquoted text string
•
with no spaces and a maximum of 64 alphanumeric characters.
For example, to create a Layer 7 HTTP deep packet inspection policy map, enter:
host/Admin(config)# policy-map type inspect http all-match
HTTP_INSPECT_L7POLICY
host/Admin(config-pmap-ins-http)#
The CLI displays the policy map configuration mode.
To remove a Layer 7 HTTP deep packet inspection policy map from the ACE,
enter:
host1/Admin(config)# no policy-map type inspect http all-match
HTTP_INSPECT_L7POLICY
You can use the description command to provide a brief summary of the Layer 7
HTTP deep packet inspection policy map.
You must access the policy map configuration mode to specify the description
command.
The syntax of this command is as follows:
description text
Use the text argument to enter an unquoted text string with a maximum of 240
alphanumeric characters.
To add a description that the policy map is to perform HTTP deep packet
inspection, enter:
host1/Admin(config-pmap-ins-http)# description HTTP protocol deep
inspection of incoming traffic
To remove the description from the policy map, enter:
host1/Admin(config-pmap-ins-http)# no description
Chapter 3 Configuring Application Protocol Inspection
OL-16202-01