Cisco PIX 500 Series Configuration Manual page 16

Contents
Using Modular Policy Framework
21
C H A P T E R
Cisco Security Appliance Command Line Configuration Guide
xvi
Enabling Filtering of Long HTTP URLs
Truncating Long HTTP URLs
Exempting Traffic from Filtering
Filtering HTTPS URLs
Filtering FTP Requests
Viewing Filtering Statistics and Configuration
Viewing Filtering Server Statistics
Viewing Buffer Configuration and Statistics
Viewing Caching Statistics
Viewing Filtering Performance Statistics
Viewing Filtering Configuration
Modular Policy Framework Overview
Default Global Policy
Identifying Traffic Using a Layer 3/4 Class Map
Creating a Layer 3/4 Class Map for Through Traffic
Creating a Layer 3/4 Class Map for Management Traffic
Configuring Special Actions for Application Inspections
Creating a Regular Expression
Creating a Regular Expression Class Map
Identifying Traffic in an Inspection Class Map
Defining Actions in an Inspection Policy Map
Defining Actions Using a Layer 3/4 Policy Map
Layer 3/4 Policy Map Overview
Policy Map Guidelines
Supported Feature Types
Feature Directionality
Feature Matching Guidelines within a Policy Map
Feature Matching Guidelines for multiple Policy Maps
Order in Which Multiple Feature Actions are Applied
Default Layer 3/4 Policy Map
Adding a Layer 3/4 Policy Map
Applying a Layer 3/4 Policy to an Interface Using a Service Policy
Modular Policy Framework Examples
Applying Inspection and QoS Policing to HTTP Traffic
Applying Inspection to HTTP Traffic Globally
Applying Inspection and Connection Limits to HTTP Traffic to Specific Servers
Applying Inspection to HTTP Traffic with NAT
20-7
20-7
20-8
20-8
20-9
20-9
20-10
20-11
20-11
20-11
20-12
21-1
21-1
21-2
21-2
21-6
21-9
21-10
21-11
21-13
21-13
21-14
21-14
21-14
21-16
21-16
21-19
21-20
21-22
21-3
21-5
21-6
21-15
21-15
21-16
21-18
21-19
21-21
OL-12172-03