Cisco Asdm 7 User Guide

 
12-25
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 12      Configuring Inspection for Voice and Video Protocols
  SIP Inspection
–Message Path—Match the SIP Via header.
–Request Method—Match the SIP request method.
–Third-Party Registration—Match the requester of a third-party registration.
–URI Length—Match a URI in the SIP headers, between 0 and 65536.
Called Party Criterion Values—Specifies to match the called party. Applies the regular expression 
match.
–Regular Expression—Lists...

 
12-26
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 12      Configuring Inspection for Voice and Video Protocols
  SIP Inspection
Message Path Criterion Values—Specifies to match a SIP Via header. Applies the regular expression 
match.
–Regular Expression—Lists the defined regular expressions to match.
–Manage—Opens the Manage Regular Expressions dialog box, which lets you configure regular 
expressions.
–Regular Expression Class—Lists the defined regular expression classes to match....

 
12-27
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 12      Configuring Inspection for Voice and Video Protocols
  SIP Inspection
SIP instant messaging (IM) extensions: Enabled.
Non-SIP traffic on SIP port: Permitted.
Hide server’s and endpoint’s IP addresses: Disabled.
Mask software version and non-SIP URIs: Disabled.
Ensure that the number of hops to destination is greater than 0: Enabled.
RTP conformance: Not enforced.
SIP conformance: Do not perform state checking and header...

 
12-28
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 12      Configuring Inspection for Voice and Video Protocols
  SIP Inspection
–Low—Default.
SIP instant messaging (IM) extensions: Enabled.
Non-SIP traffic on SIP port: Permitted.
Hide server’s and endpoint’s IP addresses: Disabled.
Mask software version and non-SIP URIs: Disabled.
Ensure that the number of hops to destination is greater than 0: Enabled.
RTP conformance: Not enforced.
SIP conformance: Do not perform state checking and...

 
12-29
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 12      Configuring Inspection for Voice and Video Protocols
  SIP Inspection
Description—Enter the description of the SIP map, up to 200 characters in length.
Security Level—Shows the security level settings to configure
Filtering—Tab that lets you configure the filtering settings for SIP.
–Enable SIP instant messaging (IM) extensions—Enables Instant Messaging extensions. Default 
is enabled.
–Permit non-SIP traffic on SIP port—Permits...

 
12-30
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 12      Configuring Inspection for Voice and Video Protocols
  SIP Inspection
–Add—Opens the Add SIP Inspect dialog box to add a SIP inspection.
–Edit—Opens the Edit SIP Inspect dialog box to edit a SIP inspection.
–Delete—Deletes a SIP inspection.
–Move Up—Moves an inspection up in the list.
–Move Down—Moves an inspection down in the list.
Add/Edit SIP Inspect
Configuration > Global Objects  > Inspect Maps > SIP > SIP Inspect Map >...

 
12-31
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 12      Configuring Inspection for Voice and Video Protocols
  SIP Inspection
–Regular Expression Class—Lists the defined regular expression classes to match.
–Manage—Opens the Manage Regular Expression Class dialog box, which lets you configure 
regular expression class maps.
Content Length Criterion Values—Specifies to match a SIP content header of a length greater than 
specified.
–Greater Than Length—Enter a header length value in...

 
12-32
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 12      Configuring Inspection for Voice and Video Protocols
  Skinny (SCCP) Inspection
URI Length Criterion Values—Specifies to match a URI in the SIP headers greater than specified 
length.
–URI type—Specifies to match either SIP URI or TEL URI.
–Greater Than Length—Length in bytes.
Multiple Matches—Specifies multiple matches for the SIP inspection.
–SIP Traffic Class—Specifies the SIP traffic class match.
–Manage—Opens the Manage SIP...

 
12-33
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 12      Configuring Inspection for Voice and Video Protocols
  Skinny (SCCP) Inspection
Normal traffic between Cisco CallManager and Cisco IP Phones uses SCCP and is handled by SCCP 
inspection without any special configuration. The ASA also supports DHCP options 150 and 66, which 
it accomplishes by sending the location of a TFTP server to Cisco IP Phones and other DHCP clients. 
Cisco IP Phones might also include DHCP option 3 in...

 
12-34
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 12      Configuring Inspection for Voice and Video Protocols
  Skinny (SCCP) Inspection
Select SCCP (Skinny) Map
Add/Edit Service Policy Rule Wizard > Rule Actions > Protocol Inspection Tab > 
Select SCCP Map
The Select SCCP (Skinny) Map dialog box lets you select or create a new SCCP (Skinny) map. An SCCP 
(Skinny) map lets you change the configuration values used for SCCP (Skinny) application inspection. 
The Select SCCP (Skinny) Map...