Refer to the policy-map type inspect command for more information. For example, you can configure special actions for application inspection with the use of the MPF that uses an inspection policy map. In addition, the regex command can be used for various features that require text matching. In order to create a regular expression, use the regex command. For example, type dg in order to enter d?g in the configuration.

Note: Use Ctrl+V in order to escape all of the special characters in the CLI, such as question marks (?) or tabs. For example, you can match a URL string inside an HTTP packet. You can use a regular expression to match the content of certain application traffic. Refer to Applying a Layer 3/4 Policy to an Interface Using a Service Policy for more information.Ī regular expression matches text strings either literally as an exact string or by the use of metacharacters, so you can match multiple variants of a text string. Refer to Defining Actions Using a Layer 3/4 Policy Map for more information.Īctivate the actions on an interface. Refer to Configuring Special Actions for Application Inspections for more information.Īpply actions to the Layer 3 and Layer 4 traffic. (Application inspection only.) Define special actions for application inspection traffic. Refer to Identifying Traffic Using a Layer 3/4 Class Map for more information. Identify the Layer 3 and Layer 4 traffic to which you want to apply actions. The configuration of the MPF consists of four tasks: TCP normalization, TCP and UDP connection limits and timeouts, and TCP sequence number randomization For example, you can use MPF to create a timeout configuration that is specific to a particular TCP application, as opposed to one that applies to all TCP applications. MPF provides a consistent and flexible way to configure security appliance features. Background Information Modular Policy Framework Overview Refer to the Cisco Technical Tips Conventions for more information on document conventions. If your network is live, make sure that you understand the potential impact of any command. All of the devices used in this document started with a cleared (default) configuration. The information in this document was created from the devices in a specific lab environment.

The information in this document is based on these software and hardware versions:Ĭisco 5500 Series Adaptive Security Appliance (ASA) that runs the software version 8.0(x) and laterĬisco Adaptive Security Device Manager (ASDM) version 6.x for ASA 8.x

This document assumes that the Cisco Security Appliance is configured and works properly. This document describes how to configure the Cisco Security Appliances ASA/PIX 8.x that uses regular expressions with Modular Policy Framework (MPF) in order to block or allow certain FTP sites by server name.

Best ftp sites