ASA RegEx Match

peter.kersting — Mon, 11 Mar 2019 17:58:38 GMT

Hi All,

I've configured a FTP inspect policy-map, within the policy map I'm using the match filename command to identify certain files

regex test ^cisco.*

policy-map type inspect ftp FTP_PMAP

match filename regex test

reset

The problem I have is that the regex above does not work but the regex below does.

regex test2 cisco.*

filenames are in the format cisco1.txt, cisco2.txt etc....

Any ideas? the ASA is running version 8.2(2)

Re: ASA RegEx Match

Marcin Latosiewicz — Sun, 13 Jun 2010 09:11:01 GMT

Peter,

Did a short test.

^cisco.* should match anything begining with "cisco" followed by any number of characters.

--------------

ciscoasa# test regex cisco2.txt ^cisco.*
INFO: Regular expression match succeeded.
ciscoasa# test regex 1_cisco2.txt ^cisco.*
INFO: Regular expression match failed.

---------------

If you want to match the ciscoX.txt files

-------

ciscoasa# test regex cisco2.txt cisco[0-9]\.txt
INFO: Regular expression match succeeded.
-------

Theory is regexps in test and in policy maps should be working same way ... provided no extra characters are added.

topic Re: ASA RegEx Match in Network Security

ASA RegEx Match

Re: ASA RegEx Match