Defining The Sip Instant Messaging Subscriber - Cisco 4700M Configuration Manual

Chapter 3 Configuring Application Protocol Inspection

Defining the SIP Instant Messaging Subscriber

OL-16202-01
You can filter SIP traffic based on the IM subscriber by using the match
im-subscriber command in class map SIP inspection configuration mode. The
syntax of this command is as follows:
[line_number] match im-subscriber expression
The arguments and options are as follows:
line_number—(Optional) Argument that assists you in editing or deleting
•
individual match commands. Enter an integer from 2 to 1024 as the line
number. You can enter no line_number to delete long match commands
instead of entering the entire line. The line numbers do not dictate a priority
or sequence for the match statements.
expression—Regular expression that identifies the IM subscriber. Enter a
•
regular expression from 1 to 255 alphanumeric characters. The ACE supports
the use of regular expressions for matching. Expressions are stored in a
header map in the form header-name: expression. Header expressions allow
spaces, provided that the spaces are escaped or quoted. See
of the supported characters that you can use in regular expressions.
When matching data strings, note that the period (.) and question
Note
mark (?) characters do not have a literal meaning in regular
expressions. Use brackets ([]) to match these symbols (for example,
enter www[.]xyz[.]com instead of www.xyz.com). You can also use a
backslash (\) to escape a dot (.) or a question mark (?).
For example, enter:
host1/Admin(config-cmap-sip-insp)# match im-subscriber John_Q_Public
To remove the match statement from the class map, enter:
host1/Admin(config-cmap-sip-insp)# no match im-subscriber
John_Q_Public
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
Configuring a Layer 7 SIP Inspection Policy
Table 3-5 for a list
3-81