Cisco ASA 5505 Configuration Manual page 818

HTTP Inspection
•
Modes
The following table shows the modes in which this feature is available:
Firewall Mode
Routed
•
Add/Edit HTTP Map
The Add/Edit HTTP Map dialog box is accessible as follows:
Configuration > Global Objects > Inspect Maps > HTTP > HTTP Inspect Map > Advanced View
> Add/Edit HTTP Inspect
The Add/Edit HTTP Inspect dialog box lets you define the match criterion and value for the HTTP
inspect map.
Fields
•
•
•
Cisco ASA 5500 Series Configuration Guide using ASDM
37-34
Body Match Maximum—The maximum number of characters in the body of an HTTP message
–
that should be searched in a body match. Default is 200 bytes. A large number will have a
significant impact on performance.
Inspections—Tab that shows you the HTTP inspection configuration and lets you add or edit.
– Match Type—Shows the match type, which can be a positive or negative match.
– Criterion—Shows the criterion of the HTTP inspection.
– Value—Shows the value to match in the HTTP inspection.
Action—Shows the action if the match condition is met.
–
Log—Shows the log state.
–
Add—Opens the Add HTTP Inspect dialog box to add an HTTP inspection.
–
Edit—Opens the Edit HTTP Inspect dialog box to edit an HTTP inspection.
–
Delete—Deletes an HTTP inspection.
–
Move Up—Moves an inspection up in the list.
–
Move Down—Moves an inspection down in the list.
–
Security Context
Transparent Single
• •
Single Match—Specifies that the HTTP inspect has only one match statement.
Match Type—Specifies whether traffic should match or not match the values.
For example, if No Match is selected on the string "example.com," then any traffic that contains
"example.com" is excluded from the class map.
Criterion—Specifies which criterion of HTTP traffic to match.
Request/Response Content Type Mismatch—Specifies that the content type in the response
–
must match one of the MIME types in the accept field of the request.
Request Arguments—Applies the regular expression match to the arguments of the request.
–
Regular Expression—Lists the defined regular expressions to match.
Chapter 37 Configuring Inspection of Basic Internet Protocols
Multiple
Context System
—
•
OL-20339-01