Cisco Systems Select IPsec-Pass-Thru Map, IPsec Pass Through Inspect Map

11-46
Cisco ASA Series Firewall ASDM Configuration Guide
Chapter11 Configuring Inspection of Basic Internet Protocols
IPsec Pass Through Inspection
Select IPsec-Pass-Thru Map
The Select IPsec-Pass-Thru Map dialog box is accessible as follows:
Add/Edit Service PolicyRule Wizard > Rule Actions > Protocol Inspection Tab >
Select IPsec-Pass-Thru Map
The Select IPsec-Pass-Thru dialog box lets you select or create a new IPsec map. An IPsec map lets you
change the configuration values used for IPsec application inspection. The Select IPsec Map table
provides a list of previously configured maps that you can select for application inspection.
Fields
•Use the default IPsec inspection map—Specifies to use the default IPsec map.
•Select an IPsec map for fine control over inspection—Lets you select a defined application
inspection map or add a new one.
•Add—Opens the Add Policy Map dialog box for the inspection.
IPsec Pass Through Inspect Map
The IPsec Pass Through Inspect Map dialog box is accessible as follows:
Configuration> Global Objects > Inspect Maps > IPsec Pass Through
The IPsec Pass Through pane lets you view previously configured IPsec Pass Through application
inspection maps. An IPsec Pass Through map lets you change the default configuration values used for
IPsec Pass Through application inspection. You can use an IPsec Pass Through map to permit certain
flows without using an ACL.
Fields
•IPsec Pass Through Inspect Maps—Table that lists the defined IPsec Pass Through inspect maps.
•Add—Configures a new IPsec Pass Through inspect map. To edit an IPsec Pass Through inspect
map, select the IPsec Pass Through entry in the IPsec Pass Through Inspect Maps table and click
Customize.
•Delete—Deletes the inspect map selected in the IPsec Pass Through Inspect Maps table.
•Security Level—Select the security level (high or low).
– Low—Default.
Maximum ESP flows per client: Unlimited.
ESP idle timeout: 00:10:00.
Maximum AH flows per client: Unlimited.
AH idle timeout: 00:10:00.
– High
Maximum ESP flows per client:10.
ESP idle timeout: 00:00:30.
Maximum AH flows per client: 10.
AH idle timeout: 00:00:30.
– Customize—Opens the Add/Edit IPsec Pass Thru Policy Map dialog box for additional settings.