ASA MSSQL Inspection

[h.3brahimi]

Hello everybody,

As far as I know there is no Deep Inspection engine for MSSQL in Cisco ASA, so here arise a question. How to inspect MSSQL traffic in Cisco ASA or better to say how to inspect a custom service or port , where there is no Deep Inspection engine available ?

Regards,

Hesam

[Syed Taukir]

Access-list sql permit tcp any any eq 1433
Access-list sql permit tcp any any eq 51146

Class-map mssql
Match access-list sql
Exit
policy-map global_policy
class mssql
inspect
exit

The above configuration should work for you.

[h.3brahimi]

Dear Taukir,

My question is regarding the Deep Inspection engine, which is not available for MSSQL. The template you sent, does not have any inspection for MSSQL and will not work.

Regards,

Hesam