Configuring Layer 7 Inspection

[mahesh18]

Hi Everyone,

I was reading this from cisco live--

Configuring layer 7 inspection

1.Create a Layer 7 class map to identify traffic by matching criteria specific to applications: 

2.Create a Layer 7 policy map to defend against Application Layer attacks by referencing a Layer 7 class-map and applying an action

3.Create a Layer 3/4 policy map to associate traffic defined in a Layer 3/4 class map and reference the Layer 7 policy map:???

I understand lines 1 and 2  but need to know what does  line 3 mean?Need explanation on that?

Regards

Mahesh

[lcambron · Accepted solution]

Hello,

Example:

class-map L3_Class

match access-list L3_ACL

class-map type inspect http match-all BlockDomainsClass

match request header host regex class DomainBlockList

policy-map type inspect http http_inspection_policy

class BlockDomainsClass

  reset log

policy-map inside-policy ---------------------{ L3 Policy-map }

class L3_Class ---------------------------------{ L3 Classs-map }

  inspect http http_inspection_policy-----{ L7 policy-map }

I hope this helps.

Regards,

Felipe.

[mahesh18]

Hi Felipe,

Ya that helped a lot.Can you please tell the reason why we need to do step 3?

Regards

Mahesh

[lcambron · Accepted solution]

Mahesh,

After the L7 policy-map has been created, this is how you can apply it.

Regards,

Felipe.

[mahesh18]

Hi Felipe,

Thanks for answering.

Regards

Mahesh

[lcambron]

Mahesh,

You're welcome, I'm glad to be of help.

Regards,

Felipe.