Cisco Systems CL-28826-01 Configuring NetBIOS Maps

17-75
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter17 Managing Firewall Inspection Rules
Configuring Protocols and Maps for Inspection
Configuring NetBIOS Maps
Use the Add or Edit NetBIOS Map dialog boxes to define maps for NetBIOS inspection. A NetBIOS
policy map lets you change the default configuration values used for NetBIOS inspection.
The NetBIOS inspection engine translates IP addresses in the NetBIOS name service (NBNS) packets
according to the security appliance NAT configuration.
Navigation Path
Select Manage > Policy Objects, then select Maps > Policy Maps > Inspect > NetBIOS from the
Object Type selector. Right-click inside the work area, then select New Object or right-click a row and
select Edit Object.
Related Topics
•Understanding Map Objects, page 6-72
•Configuring Protocols and Maps for Inspection, page 17-21
Field Reference
Allow ESP
Maximum ESP Tunnels per
Client
ESP Idle Timeout
Whether to allow ESP traffic. If you select this option, you can
configure the maximum number of ESP tunnels that each client can
have and the amount of time that an ESP tunnel can be idle before it is
closed (in hours:minutes:seconds format). The default timeout is 10
minutes (00:10:00).
Allow AH
Maximum AH Tunnels per
Client
AH Idle Timeout
Whether to allow AH traffic. If you select this option, you can configure
the maximum number of AH tunnels that each client can have and the
amount of time that an AH tunnel can be idle before it is closed (in
hours:minutes:seconds format). The default timeout is 10 minutes
(00:10:00).
Category The category assigned to the object. Categories help you organize and
identify rules and objects. See Using Category Objects, page 6-12.
Allow Value Override per
Device
Overrides
Edit button
Whether to allow the object definition to be changed at the device level.
For more information, see Allowing a Policy Object to Be Overridden,
page 6-18 and Understanding Policy Object Overrides for Individual
Devices, page 6-17.
If you allow device overrides, you can click the Edit button to create,
edit, and view the overrides. The Overrides field indicates the number
of devices that have overrides for this object.
Table17-43 Add and Edit IPsec Pass Through Map Dialog Boxes (Continued)
Element Description
Table17-44 Add or Edit NetBIOS Map Dialog Boxes
Element Description
Name The name of the policy object. A maximum of 40 characters is allowed.
Description A description of the policy object. A maximum of 200 characters is
allowed.