Snmp Inspection; Snmp Inspection Overview - Cisco 7604 Configuration Manual

Chapter 22 Applying Application Layer Protocol Inspection
Note
Use the service-policy command to apply the policy map globally or to a specific interface, as follows:
Step 7
hostname(config-pmap-c)# service-policy policy_map_name [global | interface interface_ID]
hostname(config)#
where policy_map_name is the policy map you configured in
to traffic on all the interfaces, use the global option. If you want to apply the policy map to traffic on a
specific interface, use the interface interface_ID option, where interface_ID is the name assigned to the
interface with the nameif command.
The FWSM begins inspecting SMTP traffic, as specified.
Example 22-13 Configuring and Enabling ESMTP Inspection
hostname(config)# class-map smtp_port
hostname(config-cmap)# match port tcp eq 25
hostname(config-cmap)# policy-map sample_policy
hostname(config-pmap)# class smtp_port
hostname(config-pmap-c)# inspect esmtp
hostname(config-pmap-c)# service-policy sample_policy interface outside
hostname(config)#

SNMP Inspection

This section describes how to enable SNMP application inspection and change the default port
configuration. This section includes the following topics:
•
•

SNMP Inspection Overview

SNMP application inspection lets you restrict SNMP traffic to a specific version of SNMP. Earlier
versions of SNMP are less secure; therefore, denying certain SNMP versions may be required by your
security policy. The FWSM can deny SNMP versions 1, 2, 2c, or 3. You control the versions permitted
by using the deny version command in SNMP map configuration mode.
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
For information about the differences between the inspect smtp and inspect esmtp commands,
see the "SMTP and Extended SMTP Inspection Overview" section on page
SNMP Inspection Overview, page 22-97
Enabling and Configuring SNMP Application Inspection, page 22-98
SNMP Inspection
22-94.
Step 4. If you want to apply the policy map
22-97