Hello All,
We are migrating from cisco 2811 to ISR 4331 and have IP INSPECT configured on the routers which includes the below config
==========================================
ip inspect name <name > tcp alert on timeout 1800
ip inspect name <name> udp alert on timeout 1800
==========================================
Accordingly i referred a link on support forum and below is the config i amended
===================================================================
class-map type inspect match-any FIREOUT
match protocol tcp
match protocol udp
!
policy-map type inspect INTERNET-POLICY
class type inspect FIREOUT
inspect
class class-default
!
zone security inside
description Bay Network
zone security outside
description Internet
zone-pair security BAY source inside destination outside
service-policy type inspect INTERNET-POLICY
///////////interface gig0/0/0///////////
zone-member security inside
///////////interface gig0/0/1//////////
zone-member security outside
======================================================================
Now for TCP and UDP to send alerts on timeout 1800 do i need to configure parameter-map for the same
or any example of the sample configuration that i can refer to
Regards,
Ranjit
