Cisco Systems IPsec Pass Through Inspect Map

47-47
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter47 Configuring Inspection of Basic Internet Protocol s
IPsec Pass Through Inspection
Fields
•Use the default IPsec inspection map—Specifies to use the default IPsec map.
•Select an IPsec map for fine control over inspection—Lets you select a defined application
inspection map or add a new one.
•Add—Opens the Add Policy Map dialog box for the inspection.
Modes
The following table shows the modes in which this feature is available:
IPsec Pass Through Inspect Map
The IPsec Pass Through Inspect Map dialog box is accessible as follows:
Configuration> Global Objects > Inspect Maps > IPsec Pass Through
The IPsec Pass Through pane lets you view previously configured IPsec Pass Through application
inspection maps. An IPsec Pass Through map lets you change the default configuration values used for
IPsec Pass Through application inspection. You can use an IPsec Pass Through map to permit certain
flows without using an access list.
Fields
•IPsec Pass Through Inspect Maps—Table that lists the defined IPsec Pass Through inspect maps.
•Add—Configures a new IPsec Pass Through inspect map. To edit an IPsec Pass Through inspect
map, select the IPsec Pass Through entry in the IPsec Pass Through Inspect Maps table and click
Customize.
•Delete—Deletes the inspect map selected in the IPsec Pass Through Inspect Maps table.
•Security Level—Select the security level (high or low).
– Low—Default.
Maximum ESP flows per client: Unlimited.
ESP idle timeout: 00:10:00.
Maximum AH flows per client: Unlimited.
AH idle timeout: 00:10:00.
– High
Maximum ESP flows per client:10.
ESP idle timeout: 00:00:30.
Maximum AH flows per client: 10.
AH idle timeout: 00:00:30.
– Customize—Opens the Add/Edit IPsec Pass Thru Policy Map dialog box for additional settings.
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
••••—