ZBF - Inspection with AVC

Daniel Stefani — Fri, 21 Feb 2020 16:24:18 GMT

Hello,

I would like to know more details about ZBF Inspections using "policy-map type inspect avc" option in IOS XE 16.9.1

This means that ZBF can inspect nbar applications , such as dropbox or ms-office365.

What kind of inspections are performed

Here one Snippet of code:

class-map match-any AVC-CLASS
match protocol ms-office-365
match protocol skype
match protocol youtube
match protocol dropbox
!
policy-map type inspect avc AVC-POLICY
class AVC-CLASS
allow
class class-default
deny
!
class-map type inspect match-any INSIDE_TO_OUTSIDE_CLASS
match protocol http
match protocol https
match protocol tcp
match protocol udp
!
policy-map type inspect INSIDE_TO_OUTSIDE_POLICY
class type inspect INSIDE_TO_OUTSIDE_CLASS
inspect
service-policy avc AVC-POLICY
class class-default
drop log

Best Regards,

Daniel Stefani

topic ZBF - Inspection with AVC in Network Security

ZBF - Inspection with AVC