Cisco Systems PPTP Inspection

11-51
Cisco ASA Series Firewall ASDM Configuration Guide
Chapter11 Configuring Inspection of Basic Internet Protocols
PPTP Inspection
•Add—Opens the Add Policy Map dialog box for the inspection.
NetBIOS Inspect Map
The NetBIOS Inspect Map dialog box is accessible as follows:
Configuration> Global Objec ts > Inspect Maps > NetBIOS
The NetBIOS pane lets you view previously configured NetBIOS application inspection maps. A
NetBIOS map lets you change the default configuration values used for NetBIOS application inspection.
NetBIOS application inspection performs NAT for the embedded IP address in the NetBIOS name
service packets and NetBIOS datagram services packets. It also enforces protocol conformance,
checking the various count and length fields for consistency.
Fields
•NetBIOS Inspect Maps—Table that lists the defined NetBIOS inspect maps.
•Add—Configures a new NetBIOS inspect map.
•Edit—Edits the selected NetBIOS entry in the NetBIOS Inspect Maps table.
•Delete—Deletes the inspect map selected in the NetBIOS Inspect Maps table.
Add/Edit NetBIOS Policy Map
The Add/Edit NetBIOS Policy Map dialog box is accessible as follows:
Configuration> Global Objects > Inspect Maps > NetBIOS > NetBIOS Inspect Map > View
The Add/Edit NetBIOS Policy Map pane lets you configure the protocol violation settings for NetBIOS
application inspection maps.
Fields
•Name—When adding a NetBIOS map, enter the name of the NetBIOS map. When editing an
NetBIOS map, the name of the previously configured NetBIOS map is shown.
•Description—Enter the description of the NetBIOS map, up to 200 characters in length.
•Check for protocol violations—Checks for protocol violations and executes specified action.
– Action—Drop packet or log.
– Log—Enable or disable.
PPTP Inspection
PPTP is a protocol for tunneling PPP traffic. A PPTP session is composed of one TCP channel and
usually two PPTP GRE tunnels. The TCP channel is the control channel used for negotiating and
managing the PPTP GRE tunnels. The GRE tunnels carries PPP sessions between the two hosts.
When enabled, PPTP application inspection inspects PPTP protocol packets and dynamically creates the
GRE connections and xlates necessary to permit PPTP traffic. Only Version 1, as defined in RFC 2637,
is supported.