topic Configuring Layer 7 Inspection in Network Security

Configuring Layer 7 Inspection

mahesh18 — Tue, 12 Mar 2019 02:10:37 GMT

Hi Everyone,

I was reading this from cisco live--

Configuring layer 7 inspection

1.Create a Layer 7 class map to identify traffic by matching criteria specific to applications:

2.Create a Layer 7 policy map to defend against Application Layer attacks by referencing a Layer 7 class-map and applying an action

3.Create a Layer 3/4 policy map to associate traffic defined in a Layer 3/4 class map and reference the Layer 7 policy map:???

I understand lines 1 and 2 but need to know what does line 3 mean?Need explanation on that?

Regards

Mahesh

Configuring Layer 7 Inspection

lcambron — Wed, 10 Jul 2013 17:14:01 GMT

Hello,

Example:

class-map L3_Class

match access-list L3_ACL

class-map type inspect http match-all BlockDomainsClass

match request header host regex class DomainBlockList

policy-map type inspect http http_inspection_policy

class BlockDomainsClass

reset log

policy-map inside-policy ---------------------{ L3 Policy-map }

class L3_Class ---------------------------------{ L3 Classs-map }

inspect http http_inspection_policy-----{ L7 policy-map }

I hope this helps.

Regards,

Felipe.

Configuring Layer 7 Inspection

mahesh18 — Wed, 10 Jul 2013 17:41:15 GMT

Hi Felipe,

Ya that helped a lot.Can you please tell the reason why we need to do step 3?

Regards

Mahesh

Configuring Layer 7 Inspection

lcambron — Wed, 10 Jul 2013 19:23:53 GMT

Mahesh,

After the L7 policy-map has been created, this is how you can apply it.

Regards,

Felipe.

Configuring Layer 7 Inspection

mahesh18 — Wed, 10 Jul 2013 20:21:54 GMT

Hi Felipe,

Thanks for answering.

Regards

Mahesh

Configuring Layer 7 Inspection

lcambron — Wed, 10 Jul 2013 20:31:20 GMT

Mahesh,

You're welcome, I'm glad to be of help.

Regards,

Felipe.