17-79
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter17 Managing Firewall Inspection Rules
Configuring Protocols and Maps for Inspection
SIP Class and Policy Maps Add or Edit Match Condition (and Action) Dialog Boxes
Use the Add or Edit SIP Match Criterion (for SIP class maps) or Match Condition and Action (for SIP
policy maps) dialog boxes to do the following:
Define the match criterion and value for a SIP class map.
Select a SIP class map when creating a SIP policy map.
Define the match criterion, value, and action directly in a SIP policy map.
The fields on this dialog box change based on the criterion you select and whether you are creating a
class map or policy map.
Navigation Path
When creating a SIP class map, in the Policy Object Manager, from the Add or Edit Class Maps dialog
boxes for SIP, right-click inside the table, then select Add Row or right-click a row, then select Edit
Row. See Configuring Class Maps for Inspection Policies, page17-26.
When creating a SIP policy map, in the Policy Object Manager, from the Match Condition and Action
tab on the Add and Edit SIP Map dialog boxes, right-click inside the table, then select Add Row or
right-click a row, then select Edit Row. See Configuring SIP Maps, page 17-77.
Related Topics
Understanding Map Objects, page 6-72
Configuring Protocols and Maps for Inspection, page 17-21
Field Reference
Allow Value Override per
Device
Overrides
Edit button
Whether to allow the object definition to be changed at the device level.
For more information, see Allowing a Policy Object to Be Overridden,
page 6-18 and Understanding Policy Object Overrides for Individual
Devices, page 6-17.
If you allow device overrides, you can click the Edit button to create,
edit, and view the overrides. The Overrides field indicates the number
of devices that have overrides for this object.
Table17-46 Add and Edit SIP Map Dialog Box (Continued)
Element Description
Table17-47 SIP Class and Policy Maps Add and Edit Match Condition and Action Dialog Boxes
Element Description
Match Type
Class Name
(Policy Map only)
Enables you to use an existing SIP class map or define a new SIP class
map.
Use Specified Values—You want to define the class map on this
dialog box.
Use Values in Class Map—You want to select an existing SIP class
map policy object. Enter the name of the SIP class map in the Class
Name field. Cli ck Select to select the map from a list or to create
a new class map object.