Cisco Systems NetBIOS Inspection

11-50
Cisco ASA Series Firewall ASDM Configuration Guide
Chapter11 Configuring Inspection of Basic Internet Protocols
NetBIOS Inspection
You can configure IPv6 inspection as part of a new service policy rule, or you can edit an existing service
policy.
Step2 On the Rule Actions dialog box, click the Protocol Inspections tab.
Step3 Check the IPv6 check box.
Step4 (Optional) To add an IPv6 inspection policy map that you configured in the “(Optional) Configuring an
IPv6 Inspection Policy Map” section on page11-48:
a. Click Configure.
The Select IPv6 Inspect Map dialog box appears.
b. Select the map name, and click OK.
Alternatively, you can click the Add button to add a new inspection policy map.
Step5 Click OK or Finish.
NetBIOS Inspection
This section describes the IM inspection engine. This section includes the following topics:
•NetBIOS Inspection Overview, page11-50
•Select NETBIOS Map, page 11-50
•“NetBIOS Inspect Map” section on page 11-51
•“Add/Edit NetBIOS Policy Map” section on page11-51
NetBIOS Inspection Overview
NetBIOS inspection is enabled by default. The NetBios inspection engine translates IP addresses in the
NetBios name service (NBNS) packets according to the ASA NAT configuration.
Select NETBIOS Map
The Select NETBIOS Map dialog box is accessible as follows:
Add/Edit Service PolicyRule Wizard > Rule Actions > Protocol Inspection Tab >
Select NetBIOS Map
The Select NETBIOS Map dialog box lets you select or create a new NetBIOS map. A NetBIOS map
lets you change the configuration values used for NetBIOS application inspection. The Select NetBIOS
Map table provides a list of previously configured maps that you can select for application inspection.
Fields
•Use the default IM inspection map—Specifies to use the default NetBIOS map.
•Select a NetBIOS map for fine control over inspection—Lets you select a defined application
inspection map or add a new one.