Cisco Systems 2.5 Permit, Block, and Alarm Controls

10-17
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
Chapter10 Application Security
Applications/Protocols
Timeout Field
Enter the number of seconds that a session for this application should be managed
after no activity has been detected. The timeout value that you enter sets the TCP
Idle Timeout value if this is a TCP application, or the UDP timeout value if this
is a UDP application.
Other Options
Certain applications can have additional options set. Depending on the
application, you may see the options described next.
MAX Data field
Specifies the maximum number of bytes (data) that can be transferred in a single
Simple Mail Transport Protocol (SMTP) session. After the maximum value is
exceeded, the firewall logs an alert message and closes t he session. Default value:
20 MB.
Secure Login Checkbox
Causes a user at a nonsecure location to use encryption for authentication.
Reset Checkbox
Resets the TCP connection if the client enters a nonprotocol command before
authentication is complete.
Router Traffic Checkbox
Enables inspection of traffic destined to or originated from a router. Applicable
only for H.323, TCP, and UDP protocols.
Permit, Block, and Alarm Controls
Use the Permit, Block, and Alarm controls to specify what the rou ter is to do when
it encounters traffic with the characteristics that you specify. To make a policy
setting for an option with these controls, check the box next to it. Then, in the
Action column, choose Permit to allow traffic related to that option, or choose
Block to deny traffic. If you want an alarm to be sent to the log when this t ype of
traffic is encountered, check Send Alarm. The Send Alarm control is not used in
all windows.