Cisco Systems ASA 5555-X, ASA 5505, ASA 5545-X, ASA 5585-X, ASA 5580 manual 17-14

Chapter 17 Configuring the TLS Proxy for Encrypted Voice Inspection

Configuring the TLS Proxy for Encrypted Voice Inspection

	Command	Purpose
Step 1	hostname(config)# class-mapclass_map_name	Configures the secure Skinny class of traffic to
	Example:	inspect.
	ciscoasa(config)# class-map sec_skinny	Where class_map_name is the name of the Skinny
		class map.
Step 2	ciscoasa(config-cmap)# match port tcp eq 2443	Matches the TCP port 2443 to which you want to
		apply actions for secure Skinny inspection
Step 3	ciscoasa(config-cmap)# exit
Step 4	hostname(config)# policy-map type inspect skinny	Defines special actions for Skinny inspection
	policy_map_name	application traffic.
	Example:
	ciscoasa(config)# policy-map type inspect skinny
	skinny_inspect
Step 5	ciscoasa(config-pmap)# parameters	Specifies the parameters for Skinny inspection.
	ciscoasa(config-pmap-p)# ! Skinny inspection	Parameters affect the behavior of the inspection
	parameters	engine.
		The commands available in parameters
		configuration mode depend on the application.
Step 6	ciscoasa(config-pmap-p)# exit	Exits from Policy Map configuration mode.
Step 7	hostname(config)# policy-mapname	Configure the policy map and attach the action to the
	Example:	class of traffic.
	ciscoasa(config)# policy-map global_policy
Step 8	ciscoasa(config-pmap)#class inspection_default	Specifies the default class map.
		The configuration includes a default Layer 3/4 class
		map that the ASA uses in the default global policy.
		It is called inspection_default and matches the
		default inspection traffic,
Step 9	ciscoasa(config-pmap-c)# inspect skinny skinny_map	Enables SCCP (Skinny) application inspection.
	Example:
	ciscoasa(config-pmap-c)# inspect skinny
	skinny_inspect
Step 10	ciscoasa(config-pmap)# class classmap_name	Assigns a class map to the policy map where you can
	Example:	assign actions to the class map traffic.
	ciscoasa(config-pmap)# class sec_skinny
Step 11	ciscoasa(config-pmap-c)# inspect skinny skinny_map	Enables TLS proxy for the specified inspection
	tls-proxy proxy_name	session.
	Example:
	ciscoasa(config-pmap-c)# inspect skinny
	skinny_inspect tls-proxy my_proxy
Step 12	ciscoasa(config-pmap-c)# exit	Exits from the Policy Map configuration mode.
Step 13	ciscoasa(config)# service-policypolicymap_name	Enables the service policy on all interfaces.
	global
	Example:
	ciscoasa(config)# service-policy global_policy
	global

Cisco ASA Series Firewall CLI Configuration Guide

17-14