Cisco Systems CL-28826-01 Configuring Inspect Parameter Maps

21-29
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter21 Managing Zone-based Firewall Rules
Configuring Inspection Maps for Zone-based Firewall Policies
N2H2 and Websense Class Add or Edit Match Criterion Dialog Boxes
Use the Add or Edit Match Criterion dialog boxes for the N2H2 (SmartFilter) and Websense web filter
classes to define a match criterion and value for the class map. The only match criterion available is to
match any response from the SmartFilter or Websense server.
Navigation Path
From the Add or Edit Class Maps dialog boxes for the N2H2 or Websense web filter class, right-click
inside the table and select Add Row or right-click a row and select Edit Row. See Configuring Class
Maps for Zone-Based Firewall Policies, page 21-17.
Related Topics
•Understanding Map Objects, page 6-72
•Configuring Content Filtering Maps for Zone-based Firewall Policies, page21-35
•Understanding the Zone-based Firewall Rules, page 21-3
Configuring Inspect Parameter Maps
Use the Add and Edit Inspect Parameter Map dialog boxes to define a parameter map for inspection for
zone-based firewall policies on routers. If you configure the action of a zone-based firewall policy rule
as Inspect or Content Filter, you can select an inspect parameter map to define connection, timeout, and
other settings for the inspection action. If you do not select an inspect parameter map for a zone-based
firewall rule, the system uses default values for these settings.
Navigation Path
Select Manage > Policy Objects, then select Maps > Parameter Maps > Inspect > Inspect
Parameters in the table of contents. Right-click inside the work area and select New Object, or
right-click a row and select Edit Object.
Related Topics
•Understanding Map Objects, page 6-72
•Configuring Inspection Maps for Zone-based Firewall Policies, page21-15
•Configuring Content Filtering Maps for Zone-based Firewall Policies, page21-35
•Understanding the Zone-based Firewall Rules, page 21-3
URLF Glob Parameter Map The URLF Glob parameter map object that defines the URL patterns
that you want to match. Ensure that the object you select has the
appropriate content for the type of matching you selected.
Enter the name of the object. You can click Select to choose the object
from a list of existing ones or to create a new object.
Table21-8 Local Web Filter Class Add or Edit Match Criterion Dialog Boxes (Continued)
Element Description