Cisco ASA 5505 Configuration Manual page 911

Chapter 40 Configuring Inspection for Management Application Protocols
SNMP Inspection Overview
SNMP application inspection lets you restrict SNMP traffic to a specific version of SNMP. Earlier
versions of SNMP are less secure; therefore, denying certain SNMP versions may be required by your
security policy. The adaptive security appliance can deny SNMP versions 1, 2, 2c, or 3. You control the
versions permitted by creating an SNMP map.
You then apply the SNMP map when you enable SNMP inspection according to the
Application Layer Protocol Inspection" section on page
Select SNMP Map
The Select SNMP Map dialog box lets you select or create a new SNMP map. An SNMP map lets you
change the configuration values used for SNMP application inspection. The Select SNMP Map table
provides a list of previously configured maps that you can select for application inspection.
Fields
•
•
•
Modes
The following table shows the modes in which this feature is available:
Firewall Mode
Routed
•
SNMP Inspect Map
The SNMP pane lets you view previously configured SNMP application inspection maps. An SNMP
map lets you change the default configuration values used for SNMP application inspection.
Fields
•
•
•
•
Modes
The following table shows the modes in which this feature is available:
OL-20339-01
Use the default SNMP inspection map—Specifies to use the default SNMP map.
Select an SNMP map for fine control over inspection—Lets you select a defined application
inspection map or add a new one.
Add—Opens the Add Policy Map dialog box for the inspection.
Security Context
Transparent Single
• •
Map Name—Lists previously configured application inspection maps. Select a map and click Edit
to view or change an existing map.
Add—Configures a new SNMP inspect map.
Edit—Edits the selected SNMP entry in the SNMP Inspect Maps table.
Delete—Deletes the inspect map selected in the SNMP Inspect Maps table.
36-5.
Multiple
Context System
—
•
Cisco ASA 5500 Series Configuration Guide using ASDM
SNMP Inspection
"Configuring
40-17