Cisco Systems 2.5 Application Inspection

9-23
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
Chapter9 Firew all Policy
Edit Firewall Policy
Source Host/Network and Destination Host/Network
Specify the source and the destination of the traffic in these fields.
Type
Choose one of the following values:
•Any IP Address—Choose if you do now want to limit the source or
destination traffic to any host or network.
•A Network—Choose if you want to specify a network address as the source
or destination, and specify the network address in the IP Address and
Wildcard Mask fie lds.
•A Host Name or IP Address—Choose if you want to specify the name or IP
address of a host. Then, specify the host in the Host Name/IP field.
IP Address
Enter the network address. This field is displayed when you c hoose A Network
in the Type field.
Wildcard Mask
Enter the wildcard mask that specifies the bits that are used for the network
address. For example, if the network address is 192.168.3.0, specify 0.0.0.255 as
the mask. This field is displayed when you choose A Network in the Type field.
Host Name/IP
Enter the name or the IP address of a host in this field. If yo u enter a name, the
router must be able to contact a DNS server to resolve the name to an IP address.
This field is displayed whenyou choose A Host Name or IP Address in the Type
field.
Application Inspection
Configure deep packet inspection for any of the applications or protocols listed in
this screen by checking the box next to the application or protocol, clicking the
button to the right of the field, and choosing Create or Select from the context
menu. Choose Create to configure a new policy map. Choose Select to apply an
existing policy map to the traffic. The policy map name appears in the field when
you are done.