Cisco Systems GTP Inspect Map

14-6
Cisco ASA Series Firewall ASDM Configuration Guide
Chapter14 Configuring Inspection for Management Application Protocols
GTP Inspection
The Select GTP Map dialog box lets you select or create a new GTP map. A GTP map lets you change
the configuration values used for GTP application inspection. The Select GTP Map table provides a list
of previously configured maps that you can select for application inspection.
Note GTP inspection requires a special license. If you try to enable GTP application inspection on a
ASA without the required license, the ASA displays an error message.
Fields
•Use the default GTP inspection map—Specifies to use the default GTP map.
•Select an GTP map for fine control over inspection—Lets you select a defined application inspection
map or add a new one.
•Add—Opens the Add Policy Map dialog box for the inspection.
GTP Inspect Map
Configuration> Global Objects > Inspect Maps > GTP
The GTP pane lets you view previously configured GTP application inspection maps. A GTP map lets
you change the default configuration values used for GTP application inspection.
GTP is a relatively new protocol designed to provide security for wireless connections to TCP/IP
networks, such as the Internet. You can use a GTP map to control timeout values, message sizes, tunnel
counts, and GTP versions traversing the security appliance.
Note GTP inspection is not available without a special license.
Fields
•GTP Inspect Maps—Table that lists the defined GTP inspect maps.
•Add—Configures a new GTP inspect map. To edit a GTP inspect map, choose the GTP entry in the
GTP Inspect Maps table and click Customize.
•Delete—Deletes the inspect map selected in the GTP Inspect Maps table.
•Security Level—Security level low only.
– Do not Permit Errors
– Maximum Number of Tunnels: 500
– GSN timeout: 00:30:00
– Pdp-Context timeout: 00:30:00
– Request timeout: 00:01:00
– Signaling timeout: 00:30:00.
– Tunnel timeout: 01:00:00.
– T3-response timeout: 00:00:20.
– Drop and log unknown message IDs.
•IMSI Prefix Filtering—Opens the IMSI Prefix Filtering dialog box to configure IMSI prefix filters.
•Customize—Opens the Add/Edit GTP Policy Map dialog box for additional settings.