cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1009
Views
0
Helpful
1
Replies

ASA HTTP Inspection

Ali Haider
Level 1
Level 1

Hi,

I need to configure the ASA HTTP inspection against the http get method with one regex (for level 15). once the policy hit it should make a log. i did foolowing config.

inspection for   GET /level/15/exec/-/access-enable HTTP/1.1\r\n.

!

regex LVL15.lev^15

!

class-map type inspect http match-all C_D_HTTP

match request method get

match request url regex LVL15

!

policy-map type inspect http P_D_HTTP

parameters

class C_D_HTTP

log

!

policy-map global_policy

class inspection_default

inspect http P_D_HTTP

!

The above configuration are hitting my policy and i can see the packets counter increments on each turn to access the http. how i can see that it generate the log as well?

1 Reply 1

Julio Carvajal
VIP Alumni
VIP Alumni

Hello Ali,

Please refer to this:

https://supportforums.cisco.com/thread/2202380

Regards,

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
Review Cisco Networking for a $25 gift card