topic Re: RPC dynamic filter in Network Security

RPC dynamic filter

chucktiede — Mon, 11 Mar 2019 19:38:21 GMT

I am looking to see if the Cisco ASA 5500 platform running ver 8.2 has support for RPC dynamic port filtering? So basically can I enable TCP 135 in an ACL and will the application policy read the RPC calls and dynamically open the ports being set in the intial conversation much like it does for FTP protocol?

Re: RPC dynamic filter

mirober2 — Fri, 21 Jan 2011 16:44:56 GMT

Hi Chuck,

Yes, this is done with the 'inspect dcerpc' command. Here is an example:

policy-map global_policy
class inspection_default

inspect dcerpc

service-policy global_policy global

Here is the command reference:

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/i2.html#wp1734557

Hope that helps.

-Mike