Cisco ASA Series Configuration Guide

CHAPTER
13-1
Cisco ASA Series Firewall CLI Configuration Guide
13
Inspection of Basic Internet Protocols
The following topics explain application inspection for basic Internet protocols. For information on why
you need to use inspection for certain protocols, and the overall methods for applying inspection, see
Getting Started with Application Layer Protocol Inspection, page 12-1.
• DNS Inspection, page 13-1
• FTP Inspection, page 13-8
• HTTP Inspection, page 13-14
• ICMP Inspection, page 13-21
• ICMP Error Inspection, page 13-21
• Instant Messaging Inspection, page 13-21
• IP Options Inspection, page 13-26
• IPsec Pass Through Inspection, page 13-30
• IPv6 Inspection, page 13-33
• NetBIOS Inspection, page 13-37
• PPTP Inspection, page 13-39
• SMTP and Extended SMTP Inspection, page 13-39
• TFTP Inspection, page 13-45
DNS Inspection
The following sections describe DNS application inspection.
• DNS Inspection Actions, page 13-2
• Defaults for DNS Inspection, page 13-2
• Configure DNS Inspection, page 13-2
• Monitoring DNS Inspection, page 13-8

Cisco ASA Series Specifications

General

Brand	Cisco
Model	ASA Series
Category	Network Hardware
Language	English