Cisco Systems Add/Edit H.323 Policy Map (Details)

12-9
Cisco ASA Series Firewall ASDM Configuration Guide
Chapter12 Configuring Inspection for Voice and Video Protocols
H.323 Inspection
Call Party Number Disabled
Call duration Limit Disabled
RTP conformance not enforced
– Medium
State Checking h225 Enabled
State Checking ras Enabled
Call Party Number Disabled
Call duration Limit Disabled
RTP conformance enforced
Limit payload to audio or video, based on the signaling exchange: no
– High
State Checking h225 Enabled
State Checking ras Enabled
Call Party Number Enabled
Call duration Limit 1:00:00
RTP conformance enforced
Limit payload to audio or video, based on the signaling exchange: yes
– Phone Number Filtering—Opens the Phone Number Filtering dialog box which lets you
configure the settings for a phone number filter.
– Default Level—Sets the security level back to the default.
•Details—Shows the State Checking, Call Attributes, Tunneling and Protocol Conformance, HSI
Group Parameters, and Inspections tabs to configure additional settings.
Add/Edit H.323 Policy Map (Details)
Configuration> Global Objects > Inspect Maps > H323 > H323 Inspect Map > Advanced View
The Add/Edit H.323 Policy Map pane lets you configure the security level and additional settings for
H.323 application inspection maps.
Fields
•Name—When adding an H.323 map, enter the name of the H.323 map. When editing an H.323 map,
the name of the previously configured H.323 map is shown.
•Description—Enter the description of the H.323 map, up to 200 characters in length.
•Security Level—Shows the security level and phone number filtering settings to configure.
•State Checking—Tab that lets you configure state checking parameters for the H.323 inspect map.
– Check state transition of H.225 messages—Enforces H.323 state checking on H.225 messages.
– Check state transition of RAS messages—Enforces H.323 state checking on RAS messages.
– Check RFC messages and open pinholes for call signal addresses in RFQ messages