RPC dynamic filter

[chucktiede]

I am looking to see if the Cisco ASA 5500 platform running ver 8.2 has support for RPC dynamic port filtering? So basically can I enable TCP 135 in an ACL and will the application policy read the RPC calls and dynamically open the ports being set in the intial conversation much like it does for FTP protocol?

[mirober2]

Hi Chuck,

Yes, this is done with the 'inspect dcerpc' command. Here is an example:

policy-map global_policy
class inspection_default

     inspect dcerpc

service-policy global_policy global

Here is the command reference:

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/i2.html#wp1734557

Hope that helps.

-Mike