Monitoring H.323 Ras Sessions; Http Inspection; Http Inspection Overview - Cisco PIX 500 Series Configuration Manual

HTTP Inspection

Monitoring H.323 RAS Sessions

The show h323-ras command displays information for H.323 RAS sessions established across the
security appliance between a gatekeeper and its H.323 endpoint. Along with the debug h323 ras event
and show local-host commands, this command is used for troubleshooting H.323 RAS inspection engine
issues.
The show h323-ras command displays connection information for troubleshooting H.323 inspection
engine issues. The following is sample output from the show h323-ras command:
hostname# show h323-ras
Total: 1
This output shows that there is one active registration between the gatekeeper 172.30.254.214 and its
client 10.130.56.14.
HTTP Inspection
This section describes the HTTP inspection engine. This section includes the following topics:
•
•

HTTP Inspection Overview

Use the HTTP inspection engine to protect against specific attacks and other threats that may be
associated with HTTP traffic. HTTP inspection performs several functions:
•
•
•
The latter two features are configured in conjunction with the filter command. For more information
about filtering, see
The no inspect http command also disables the filter url command.
Note
The enhanced HTTP inspection feature, which is also known as an application firewall and is available
when you configure an HTTP map (see
Inspection
security policy. It verifies the following for all HTTP messages:
•
•
•
Cisco Security Appliance Command Line Configuration Guide
25-44
GK
172.30.254.214 10.130.56.14
HTTP Inspection Overview, page 25-44
Configuring an HTTP Inspection Policy Map for Additional Inspection Control, page 25-45
Enhanced HTTP inspection
URL screening through N2H2 or Websense
Java and ActiveX filtering
Chapter 20, "Applying Filtering Services."
Control"), can help prevent attackers from using HTTP messages for circumventing network
Conformance to RFC 2616
Use of RFC-defined methods only.
Compliance with the additional criteria.
Chapter 25 Configuring Application Layer Protocol Inspection
Caller
"Configuring an HTTP Inspection Policy Map for Additional
OL-12172-03