Cisco Systems File Type Filtering, Add/Edit FTP Policy Map (Security Level)

11-22
Cisco ASA Series Firewall ASDM Configuration Guide
Chapter11 Configuring Inspection of Basic Internet Protocols
FTP Inspection
•Delete—Deletes the inspect map selected in the FTP Inspect Maps table.
•Security Level—Select the security level (medium or low).
– Low
Mask Banner Disabled
Mask Reply Disabled
– Medium—Default.
Mask Banner Enabled
Mask Reply Enabled
– File Type Filtering—Opens the Type Filtering dialog box to configure file type filters.
– Customize—Opens the Add/Edit FTP Policy Map dialog box for additional settings.
– Default Level—Sets the security level back to the default level of Medium.
File Type Filtering
The File Type Filtering dialog box is accessible as follows:
Configuration> Global Objects > Inspect Maps > FTP > MIME File Type Filtering
The File Type Filtering dialog box lets you configure the settings for a file type filter.
Fields
•Match Type—Shows the match type, which can be a positive or negative match.
•Criterion—Shows the criterion of the inspection.
•Value—Shows the value to match in the inspection.
•Action—Shows the action if the match condition is met.
•Log—Shows the log state.
•Add—Opens the Add File Type Filter dialog box to add a file type filter.
•Edit—Opens the Edit File Type Filter dialog box to edit a file type filter.
•Delete—Deletes a file type filter.
•Move Up—Moves an entry up in the list.
•Move Down—Moves an entry down in the list.
Add/Edit FTP Policy Map (Security Level)
The Add/Edit FTP Policy Map dialog box is accessible as follows:
Configuration> Global Objec ts > Inspect Maps > FTP > FTP Inspect Map > Basic View
The Add/Edit FTP Policy Map pane lets you configure the security level and additional settings for FTP
application inspection maps.
Fields
•Name—When adding an FTP map, enter the name of the FTP map. When editing an FTP map, the
name of the previously configured FTP map is shown.