[Trend Micro Ios content filtering] parameter-type command under policy map not available

[Carlos A. Silva]

Hi, all:

I'm trying to configure TrendMicro IOS content filtering. I have this working on a separate box, running 15.1.

On this particular testbed, I have a 2900 running:

System image file is "flash0:c2900-universalk9-mz.SPA.152-3.T1.bin"

And the following licensing:

Technology Package License Information for Module:'c2900'

-----------------------------------------------------------------

Technology    Technology-package           Technology-package

              Current       Type           Next reboot 

------------------------------------------------------------------

ipbase        ipbasek9      Permanent      ipbasek9

security      securityk9    Permanent      securityk9

uc            uck9          Permanent      uck9

data          datak9        Permanent      datak9

Configuration register is 0x2102

CUBE_GOLD_MEX#show ip trm subscription status

       Package Name:  Security & Productivity (Trial)

------------------------------------------------

             Status:  Active

Status Update Time:  18:02:51 CST Mon Jul 23 2012

    Expiration-Date:  Mon Aug 20 02:00:00 2012

    Last Req Status:  Processed response successfully

Last Req Sent Time:  18:02:51 CST Mon Jul 23 2012

CUBE_GOLD_MEX#

Also, I have the following config lines on it:

ip host trps.trendmicro.com 216.104.8.100

ip name-server 4.2.2.2

ip cef

!

multilink bundle-name authenticated

parameter-map type urlfpolicy trend tm-pmap

allow-mode on

[snip]

parameter-map type trend-global trend-glob-map

!

class-map type inspect match-all http-imap

match protocol http

class-map type urlfilter trend match-any drop-category

match url category Abortion

match url category Activist-Groups

match url category Adult-Mature-Content

match url reputation ADWARE

match url reputation DIALER

match url reputation DISEASE-VECTOR

match url reputation HACKING

match url reputation PASSWORD-CRACKING-APPLICATIONS

match url reputation PHISHING

match url reputation POTENTIALLY-MALICIOUS-SOFTWARE

match url reputation SPYWARE

match url reputation VIRUS-ACCOMPLICE

!

!

policy-map type inspect urlfilter trend-policy

class type urlfilter trend drop-category

I have not been able to get to the good part of configuring the ZBF.

I've looked over several configuration examples and can't figure out what I'm doing wrong, since I'm not able to see the command 'parameter-map' under the 'policy-map urlfiltering'

XXXXXX(config)#policy-map type inspect urlfilter trend-policy

XXXXXX(config-pmap)#?

Policy-map configuration commands:

  class        policy criteria

  description  Policy-Map description

  exit         Exit from policy-map configuration mode

  no           Negate or set default values of a command

XXXXXX(config-pmap)#

I thought it might be an issue with version 15.2.3, but according to configuration guides, commands are the same.

Can anyone provide some assistance?

TIA.

c.

[tpeckman]

Hi Carlos,

I am having the same problem.  I have seen a few diffenent configuration examples and they all show adding the "parameter type urlfpolicy trend parm-map-name" command but it doesn't exist, at least in 15.2(3)T1 and I see it listed in the the IOS documentation for 15.2.  Maybe they forgot it :-)

I guess I will open a TAC case as I do not want to downgrade...

I will keep you posted if I find the answer.

Regards,

Troy

[Carlos A. Silva]

Thanks a lot, Troy. I cannot open a TT, so if you do open it, I'd really appreciate it if you let me know what they said.

We went back to 15.1. No other choice right now.

c.

[tpeckman]

I opened a case yesterday and was told to downgrade to 15.1(4)M4 as there is a known issue with 15.2. I just finished booting with that code and the “parameter” command is back. I guess we will stick with this rev for a while.

Good luck.

Regards,

Troy