Cisco Systems Add/Edit DCERPC Policy Map

14-3
Cisco ASA Series Firewall ASDM Configuration Guide
Chapter14 Configuring Inspection for Management Application Protocols
DCERPC Inspection
DCERPC inspect maps inspect for native TCP communication between the EPM and client on well
known TCP port 135. Map and lookup operations of the EPM are supported for clients. Client and server
can be located in any security zone. The embedded server IP address and Port number are received from
the applicable EPM response messages. Because a client may attempt multiple connections to the server
port returned by EPM, multiple use of pinholes are allowed, which have user configurable timeouts.
Fields
•DCERPC Inspect Maps—Table that lists the defined DCERPC inspect maps.
•Add—Configures a new DCERPC inspect map. To edit a DCERPC inspect map, choose the
DCERPC entry in the DCERPC Inspect Maps table and click Customize.
•Delete—Deletes the inspect map selected in the DCERPC Inspect Maps table.
•Security Level—Select the security level (high, medium, or low).
– Low
Pinhole timeout: 00:02:00
Endpoint mapper service: not enforced
Endpoint mapper service lookup: enabled
Endpoint mapper service lookup timeout: 00:05:00
– Medium—Default.
Pinhole timeout: 00:01:00
Endpoint mapper service: not enforced
Endpoint mapper service lookup: disabled.
– High
Pinhole timeout: 00:01:00
Endpoint mapper service: enforced
Endpoint mapper service lookup: disabled
– Customize—Opens the Add/Edit DCERPC Policy Map dialog box for additional settings.
– Default Level—Sets the security level back to the default level of Medium.
Add/Edit DCERPC Policy Map
Configuration> Global Objec ts > Inspect Maps > DCERPC > DCERPC Inspect Map >
Basic/Advanced View
The Add/Edit DCERPC Policy Map pane lets you configure the security level and parameters for
DCERPC application inspection maps.
Fields
•Name—When adding a DCERPC map, enter the name of the DCERPC map. When editing a
DCERPC map, the name of the previously configured DCERPC map is shown.
•Description—Enter the description of the DCERPC map, up to 200 characters in length.
•Security Level—Select the security level (high, medium, or low).
– Low
Pinhole timeout: 00:02:00