17-39
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter17 Managing Firewall Inspection Rules
Configuring Protocols and Maps for Inspection
Field Reference
Table17-20 FTP Class and Policy Maps Add and Edit Match Condition and Action Dialog Boxes
Element Description
Match Type
Class Name
(Policy Map only)
Enables you to use an existing FTP class map or define a new FTP class
map.
Use Specified Values—You want to define the class map on this
dialog box.
Use Values in Class Map—You want to select an existing FTP class
map policy object. Enter the name of the FTP class map in the
Class Name field. Cli ck Select to select the map from a list or to
create a new class map object.
Criterion Specifies which criterion of FTP traffic to match:
Request Command—Matches an FTP request command.
Filename—Matches a filename for FTP transfer.
File Type—Matches a file type for FTP transfer.
Server—Matches an FTP server name.
Username—Matches an FTP username.
Type Specifies whether the map includes traffic that matches or does not
match the criterion. For example, if Doesn’t Match is selected on the
string “example.com,” then any traffic that contains “example.com” is
excluded from the map.
Matches—Matches the criterion.
Doesn’t Match—Does not match the criterion.
Action
(Policy Map only)
The action you want the device to take for traffic that matches the
defined criteria.
Var iab le F iel ds
The following fields vary based on what you select in the Criterion field. This list is a super-set of the
fields you might see.