Cisco 4700M Configuration Manual page 149

Chapter 3 Configuring Application Protocol Inspection
Table 3-3
Task and Command Example
6.
7.
8.
9.
10.
11.
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
OL-16202-01
Application Protocol Inspection Configuration Quick Start Procedures
Layer 7 HTTP Protocol Deep Inspection Quick Start (continued)
(Optional) Configure the class map to define application inspection
decisions based on the name and value in an HTTP header.
host1/Admin(config-cmap-http-insp)# match header Host
header-value .mycompanyexample.com
(Optional) Limit the HTTP traffic allowed through the ACE based on the
length of the entity-body in the HTTP message.
host1/Admin(config-cmap-http-insp)# match header length request
eq 256
(Optional) Specify a subset of the Multipurpose Internet Mail Extension
(MIME)-type messages to be permitted or denied by the ACE.
host1/Admin(config-cmap-http-insp)# match header mime-type
audio\midi
host1/Admin(config-cmap-http-insp)# match header mime-type
audio\mpeg
(Optional) Configure the class map to define application inspection
compliance decisions that restrict certain HTTP traffic from passing
through the ACE.
host1/Admin(config-cmap-http-insp)# match port-misuse p2p
(Optional) Configure the class map to define application inspection
compliance decisions based on the request methods defined in RFC 2616
and by HTTP extension methods.
host1/Admin(config-cmap-http-insp)# match request-method rfc
connect
host1/Admin(config-cmap-http-insp)# match request-method rfc get
host1/Admin(config-cmap-http-insp)# match request-method rfc head
host1/Admin(config-cmap-http-insp)# match request-method ext
index
(Optional) Configure the class map to define application inspection
decisions that limit the HTTP transfer-encoding types that can pass through
the ACE.
host1/Admin(config-cmap-http-insp)# match transfer-encoding
chunked
3-25