topic Layer 7 HTTP Policy Map in Network Security

Layer 7 HTTP Policy Map

mahesh18 — Tue, 12 Mar 2019 02:18:10 GMT

Hi Everyone,

I have this Layer 7 Policy Map which i config using ASDM under inspects

policy-map type inspect http test4

parameters

protocol-violation action drop-connection log

class _default_GoToMyPC-tunnel

drop-connection log

class maps identify the traffic and policy maps tell us what action to take.

Need to know on above config class map which matches the trafic is

class _default_GoToMyPC-tunnel

Regards

Mahesh

Message was edited by: mahesh parmar

Layer 7 HTTP Policy Map

Julio Carvajal — Mon, 29 Jul 2013 02:12:15 GMT

Hello,

Not sure what you ask..

Do u want to know what the class-map matches or includes?

Do show run class-map _default_GoToMyPC-tunnel

For Networking Posts check my blog at http://www.laguiadelnetworking.com/category/english/

Cheers,

Julio Carvajal Segura

Layer 7 HTTP Policy Map

mahesh18 — Mon, 29 Jul 2013 14:16:26 GMT

Hi Julio,

Here i need to confirm what class map matches?

Regards

MAhesh

Layer 7 HTTP Policy Map

mahesh18 — Wed, 31 Jul 2013 03:23:21 GMT

Hi Julio,

When i do

ASA1# sh run class-map _default_GoToMyPC-tunnel

ASA1#

Can you tell why the class-map output is empty?

Thanks

Mahesh

Layer 7 HTTP Policy Map

Julio Carvajal — Wed, 31 Jul 2013 06:06:25 GMT

Hello,

Well it does not look like you add it a match statement,

Did you?

Can you share show run class-map type inspect _default_GoToMyPC-tunnel

For Networking Posts check my blog at http://www.laguiadelnetworking.com/category/english/

Cheers,

Julio Carvajal Segura

Layer 7 HTTP Policy Map

mahesh18 — Thu, 01 Aug 2013 00:46:11 GMT

Hi julio,

I tried below commands but seems it does not work

ASA1# show run class-map type inspect _default_GoToMyPC-tunnel

ERROR: % Invalid input detected at '^' marker.

ASA1# show run class-map type inspect ?

dns Configure a class-map of type DNS

ftp Configure a class-map of type FTP

h323 Configure a class-map of type H323

http Configure a class-map of type HTTP

im Configure a class-map of type IM

rtsp Configure a class-map of type RTSP

scansafe Configure a class-map of type SCANSAFE

sip Configure a class-map of type SIP

ASA1# show run class-map type inspect default_GoToMyPC-tunnel

ERROR: % Invalid input detected at '^' marker.

ASA1# show run class-map type inspect_default_GoToMyPC-tunnel

ERROR: % Invalid input detected at '^' marker.

ASA1#

Thanks

Mahesh

Layer 7 HTTP Policy Map

Julio Carvajal — Thu, 01 Aug 2013 00:49:06 GMT

Hello,

I missed the HTTP

show run class-map type inspect http _default_GoToMyPC-tunnel

Check my blog at http:laguiadelnetworking.com for further information.

Cheers,

Julio Carvajal Segura

Layer 7 HTTP Policy Map

mahesh18 — Thu, 01 Aug 2013 01:14:11 GMT

Hi Julio,

Its here

ASA1# show run class-map type inspect http _default_GoToMyPC-tunnel

ASA1#

Layer 7 HTTP Policy Map

Julio Carvajal — Thu, 01 Aug 2013 16:23:05 GMT

Hello Mahesh,

It's basically null,

You are not maching anything. so nothing will get dropped

Check my blog at http:laguiadelnetworking.com for further information.

Cheers,

Julio Carvajal Segura

Layer 7 HTTP Policy Map

mahesh18 — Thu, 01 Aug 2013 16:54:39 GMT

Thanks Julio,

Regards

Mahesh