Update List of Protocols When Configuring a Class-map During IOS FW Configuration

[Christopher Kofon]

Hi Everyone.

I am working on a 2911 router with IOS version 15.2 and I want to configure Zone Base Firewalls. I have a list of protocols I want to allow through the firewall but when I do match protocol ? after creating a class-map of type inspect, I don't see some of the protocols like rtp, rtcp, secure-imap and skype. Is there anyway I can update the list of protocols available to be selected?

Thanks

[Collin Clark]

You should be able to match on any of the applications in NBAR. Have you updated to NBAR2? It can be downloaded here-

http://software.cisco.com/download/release.html?mdfid=282774227&flowid=7440&softwareid=284509011&release=7.0.0&relind=AVAILABLE&rellifecycle=&reltype=latest

The release notes list all the protocol definitions.

Hope it helps

[Christopher Kofon]

Thank you Collin.

I will try this out and get back to you.