Cisco Systems GTP Inspect Map

50-7
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter50 Configuring Inspection for Management Application Protocols
GTP Inspection
Fields
•Use the default GTP inspection map—Specifies to use the default GTP map.
•Select an GTP map for fine control over inspection—Lets you select a defined application inspection
map or add a new one.
•Add—Opens the Add Policy Map dialog box for the inspection.
Modes
The following table shows the modes in which this feature is available:
GTP Inspect Map
Configuration> Global Objects > Inspect Maps > GTP
The GTP pane lets you view previously configured GTP application inspection maps. A GTP map lets
you change the default configuration values used for GTP application inspection.
GTP is a relatively new protocol designed to provide security for wireless connections to TCP/IP
networks, such as the Internet. You can use a GTP map to control timeout values, message sizes, tunnel
counts, and GTP versions traversing the security appliance.
Note GTP inspection is not available without a special license.
Fields
•GTP Inspect Maps—Table that lists the defined GTP inspect maps.
•Add—Configures a new GTP inspect map. To edit a GTP inspect map, choose the GTP entry in the
GTP Inspect Maps table and click Customize.
•Delete—Deletes the inspect map selected in the GTP Inspect Maps table.
•Security Level—Security level low only.
– Do not Permit Errors
– Maximum Number of Tunnels: 500
– GSN timeout: 00:30:00
– Pdp-Context timeout: 00:30:00
– Request timeout: 00:01:00
– Signaling timeout: 00:30:00.
– Tunnel timeout: 01:00:00.
– T3-response timeout: 00:00:20.
– Drop and log unknown message IDs.
•IMSI Prefix Filtering—Opens the IMSI Prefix Filtering dialog box to configure IMSI prefix filters.
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
••••—