cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

360
Views
0
Helpful
1
Replies
carl_townshend
Frequent Contributor

asa application inspection

Hi all

By default the asa does a default application inspection for certain traffic.

is this inspection only looking for certain port number changes and other embedded ip addresses? I gather it doesnt look for anonimalies etc ?

cheers                  

1 ACCEPTED SOLUTION

Accepted Solutions
Karsten Iwen
VIP Mentor

The answer depends on the protocol you are looking for. Most of the default-inspections just make the protocol work (FTP, Voice-inspections and so on). But some of them look into the packets to make the connection more secure (ESMTP).

Here is some more info on the application-layer inspections:

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/inspect_overview.html#wp1435177

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

View solution in original post

1 REPLY 1
Karsten Iwen
VIP Mentor

The answer depends on the protocol you are looking for. Most of the default-inspections just make the protocol work (FTP, Voice-inspections and so on). But some of them look into the packets to make the connection more secure (ESMTP).

Here is some more info on the application-layer inspections:

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/inspect_overview.html#wp1435177

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

View solution in original post

Content for Community-Ad