topic Re: Routing Protocol Inspection Through ASA in Network Security

Routing Protocol Inspection Through ASA

Ravi_916 — Sat, 01 Feb 2020 22:57:07 GMT

do we inspect Routing protocols or routing protocols packets through asa.

By default ASA allows Routing protocol packets but i we want to inspect routing protocols.

Re: Routing Protocol Inspection Through ASA

Muhammad Awais Khan — Sat, 01 Feb 2020 23:24:44 GMT

hi,

What you want to achieve with inspection for a Routing Protocol? ASA on a high level do inspection for two reasons, to check the application whether it uses non-standard ports which will also allow to take some actions with protocol inspected and to monitor the state of the session

Re: Routing Protocol Inspection Through ASA

Marvin Rhoads — Sun, 02 Feb 2020 01:17:40 GMT

No.

Here are the protocols eligible for inspection natively on an ASA:

ccielab-asa(config-pmap-c)# inspect ?

mpf-policy-map-class mode commands/options:
  ctiqbe           
  dcerpc           
  diameter         
  dns              
  esmtp            
  ftp              
  gtp              
  h323             
  http             
  icmp             
  ils              
  im               
  ip-options       
  ipsec-pass-thru  
  ipv6             
  lisp             
  m3ua             
  mgcp             
  mmp              
  netbios          
  pptp             
  rsh              
  rtsp             
  scansafe         
  sctp             
  sip              
  skinny           
  snmp             
  sqlnet           
  stun             
  sunrpc           
  tftp             
  vxlan            
  waas             
  xdmcp            
ccielab-asa(config-pmap-c)#