21-24
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 21 Managing Zone-based Firewall Rules
Configuring Inspection Maps for Zone-based Firewall Policies
Related Topics
•Understanding Map Objects, page 6-72
•Configuring Inspection Maps for Zone-based Firewall Policies, page21-15
•Understanding the Zone-based Firewall Rules, page 21-3
SIP (IOS) Class Add or Edit Match Criterion Dialog Boxes
Use the Add or Edit Match Criterion dialog boxes for the SIP (IOS) class used with zone-based firewall
policies to define a match criterion and value for the class map.
The fields on this dialog box change based on the criterion you select.
Navigation Path
From the Add or Edit Class Maps dialog boxes for the SIP (IOS) class, right-click inside the table and
select Add Row or right-click a row and select Edit Row. See Configuring Class Maps for Zone-Based
Firewall Policies, page 21-17.
Related Topics
•Understanding Map Objects, page 6-72
•Configuring Inspection Maps for Zone-based Firewall Policies, page21-15
•Understanding the Zone-based Firewall Rules, page 21-3
Field Reference
Table21-6 SIP (IOS) Class Add or Edit Match Criterion Dialog Boxes
Element Description
Criterion Specifies which criterion of traffic to match. You can select from the
following:
•Protocol Violation—Matches traffic that violates the protocol.
•Request/Response Header Options—Matches a regular expression
against the selected request or response header field.
•Request Options—Matches the request method or matches a
regular expression against the selected request header field.
•Response Options—Matches a regular expression against the
selected response header field or status message.
Type Specifies that the map includes traffic that matches the criterion.
Var iab le F iel ds
The following fields vary based on what you select in the Criterion field. This list is a super-set of the
fields you might see.
Header The type of header in the request or response message. The regular
expression is matched against the content of headers of the selected
type.