Application Inspection in PixOS 7.0(1)

[gerard.oconnor]

Hi,

I am currently working through the release 7.0(1) documentation prior to upgrading a HA pair of 525 Firewalls. The version of software that they are currently running is 6.3(4)

From reading the Application Layer Protocol Inspection guide, there seems to be a lot of new functions available in version 7.0(1)

I would like to apply some class maps to the pix to inspect things like http, H.323, etc.

Is it possible to create multiple class maps and bind them in unique service maps globally or do I need to create one class map and bind it to one service map globally ?

Any info is much appreciated.

Thanks,

Gerard.

[owillins]

The inspect h323 command provides support for H.323 compliant applications such as Cisco CallManager and VocalTec Gatekeeper. H.323 is a suite of protocols defined by the International Telecommunication Union for multimedia conferences over LANs. The security appliance supports H.323 through Version 4, including H.323 v3 feature Multiple Calls on One Call Signaling Channel.

With H323 inspection enabled, the security appliance supports multiple calls on the same call signaling channel, a feature introduced with H.323 Version 3. This feature reduces call setup time and reduces the use of ports on the security appliance.

http://www.cisco.com/en/US/products/ps6120/products_configuration_guide_chapter09186a0080450d38.html#wp1229306