Cisco ASA Series Cli Configuration Manual page 1298

Monitoring Cisco Unified Presence
Command
Step 4
hostname(config-cmap)# exit
Step 5
hostname(config)# policy-map type inspect sip
policy_map_name
Example:
hostname(config)# policy-map type inspect sip
sip_inspect
Step 6
hostname(config-pmap)# parameters
! SIP inspection parameters
Step 7
hostname(config-pmap)# exit
Step 8
hostname(config)# policy-map name
Example:
hostname(config)# policy-map global_policy
Step 9
hostname(config-pmap)# class classmap_name
Example:
hostname(config-pmap)# class ent_x_to_y
Step 10
hostname(config-pmap)# inspect sip sip_map tls-proxy
proxy_name
hostname(config-pmap)# inspect sip sip_inspect
tls-proxy ent_x_to_y
Step 11
hostname(config-pmap)# exit
Step 12
hostname(config)# service-policy policy_map_name
global
Example:
hostname(config)# service-policy global_policy
global
Monitoring Cisco Unified Presence
Debugging is similar to debugging TLS proxy for IP Telephony. You can enable TLS proxy debug flags
along with SSL syslogs to debug TLS proxy connection problems.
For example, use the following commands to enable TLS proxy-related debug and syslog output only:
hostname(config)# debug inspect tls-proxy events
hostname(config)# debug inspect tls-proxy errors
hostname(config)# logging enable
hostname(config)# logging timestamp
hostname(config)# logging list loglist message 711001
hostname(config)# logging list loglist message 725001-725014
hostname(config)# logging list loglist message 717001-717038
hostname(config)# logging buffer-size 1000000
hostname(config)# logging buffered loglist
hostname(config)# logging debug-trace
For information about TLS proxy debugging techniques and sample output, see
Proxy, page 1-15.
Enable the debug sip command for SIP inspection engine debugging. See the command reference.
Cisco ASA Series CLI Configuration Guide
1-14
Chapter 1 Configuring Cisco Unified Presence
Purpose
Exits from Class Map configuration mode.
Defines special actions for SIP inspection
application traffic.
Specifies the parameters for SIP inspection.
Parameters affect the behavior of the inspection
engine.
The commands available in parameters
configuration mode depend on the application.
Exits from Policy Map configuration mode.
Configure the policy map and attach the action to the
class of traffic.
Assigns a class map to the policy map so that you
can assign actions to the class map traffic.
Where classmap_name is the name of the SIP class
map.
Enables TLS proxy for the specified SIP inspection
session.
Exits from Policy Map configuration mode.
Enables the service policy for SIP inspection for all
interfaces.
Where name for the policy-map command is the
name of the global policy map.
Monitoring the TLS