Cisco Systems PPTP Inspection

47-53
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter47 Configuring Inspection of Basic Internet Protocol s
PPTP Inspection
Modes
The following table shows the modes in which this feature is available:
Add/Edit NetBIOS Policy Map
The Add/Edit NetBIOS Policy Map dialog box is accessible as follows:
Configuration> Global Objects > Inspect Maps > NetBIOS > NetBIOS Inspect Map > View
The Add/Edit NetBIOS Policy Map pane lets you configure the protocol violation settings for NetBIOS
application inspection maps.
Fields
•Name—When adding a NetBIOS map, enter the name of the NetBIOS map. When editing an
NetBIOS map, the name of the previously configured NetBIOS map is shown.
•Description—Enter the description of the NetBIOS map, up to 200 characters in length.
•Check for protocol violations—Checks for protocol violations and executes specified action.
– Action—Drop packet or log.
– Log—Enable or disable.
Modes
The following table shows the modes in which this feature is available:
PPTP Inspection
PPTP is a protocol for tunneling PPP traffic. A PPTP session is composed of one TCP channel and
usually two PPTP GRE tunnels. The TCP channel is the control channel used for negotiating and
managing the PPTP GRE tunnels. The GRE tunnels carries PPP sessions between the two hosts.
When enabled, PPTP application inspection inspects PPTP protocol packets and dynamically creates the
GRE connections and xlates necessary to permit PPTP traffic. Only Version 1, as defined in RFC 2637,
is supported.
PAT is only performed for the modified version of GRE [RFC 2637] when negotiated over the PPTP TCP
control channel. Port Address Translation is not performed for the unmodified version of GRE [RFC
1701, RFC 1702].
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
••••—
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
••••—