Cisco ASA 5506-X Configuration Manual page 147

Inspection of Basic Internet Protocols
The following topics explain application inspection for basic Internet protocols. For information on why
you need to use inspection for certain protocols, and the overall methods for applying inspection, see
Getting Started with Application Layer Protocol Inspection, page
•
•
•
•
•
•
•
•
•
•
•
•
•
DNS Inspection
The following sections describe DNS application inspection.
•
•
•
•
DNS Inspection, page 7-1
FTP Inspection, page 7-8
HTTP Inspection, page 7-14
ICMP Inspection, page 7-21
ICMP Error Inspection, page 7-21
Instant Messaging Inspection, page 7-21
IP Options Inspection, page 7-26
IPsec Pass Through Inspection, page 7-30
IPv6 Inspection, page 7-33
NetBIOS Inspection, page 7-37
PPTP Inspection, page 7-39
SMTP and Extended SMTP Inspection, page 7-39
TFTP Inspection, page 7-45
DNS Inspection Actions, page 7-2
Defaults for DNS Inspection, page 7-2
Configure DNS Inspection, page 7-2
Monitoring DNS Inspection, page 7-8
C H A P T E R
6-1.
Cisco ASA Series Firewall CLI Configuration Guide
7
7-1