Chapter10 Application Security
Applications/Protocols
10-12
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
Applications/Protocols
This window allows you to create policy settings for applications and protocols
that are not found in the other windows. To learn about the buttons and drawers
available in the Application Security tab, click Application Security Windows.

Applications/Protocols Tree

The Applications/Protocols tree enables you to filter the list on the right according
to the type of applications and protocols that you want to view. First choose the
branch for the general type that you want to display. The frame on the right
displays the available items for the type that you chose. If a plus (+) sign appear s
to the left of the branch, there are subcategories that you can use to refine the
filter. Click on the + sign to expand the branch and then select the subcategory t hat
you want to display. If the list on the right is empty, there are no application s or
protocols available for that type. To choose an application, you can check the box
next to it in the tree, or you can check the box next to it in the list.
Example: If you want to display all Cisco applications, click the Applications
branch folder, and then click the Cisco folder. You will see applications like clp,
cisco-net-mgmt, and cisco-sys.
Edit Button
Click this button to edit the settings for the chosen application. Settings that you
make override the global settings configured on the router.

Applications Column

The name of the application or protocol, for example tcp, smtp, or ms-sna. To edit
the settings for an item, check the box to the left of the item name, and click Edit.

Alerts, Audit, and Timeout Columns

These columns display explicitly-set values for an item. If a setting is not changed
for an item, the column is empty. For example, if auditing has been enabled for
the ms-sna application, but no changes have been made to the alert or to the
timeout settings, the value on is displayed in the Audit column, but the Alert and
Timeout columns are blank.