Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual page 132

Configuring Signatures
http-policy—Enables inspection of HTTP traffic.
•
–
–
–
To configure the application policy, follow these steps:
Log in to the CLI using an account with administrator or operator privileges.
Step 1
Enter application policy submode:
Step 2
sensor# configure terminal
sensor(config)# service signature-definition sig0
sensor(config-sig)# application-policy
Enable inspection of FTP traffic:
Step 3
sensor(config-sig-app)# ftp-enable true
Step 4 Configure the HTTP application policy:
a. Enter HTTP application policy submode:
sensor(config-sig-app)# http-policy
b. Enable HTTP application policy enforcement:
sensor(config-sig-app-htt)# http-enable true
Specify the number of outstanding HTTP requests per connection that can be outstanding without
c.
having received a response from the server:
sensor(config-sig-app-htt)# max-outstanding-http-requests-per-connection 5
(Optional) Edit the AIC ports:
d.
sensor(config-sig-app-htt)# aic-web-ports 80-80,3128-3128
Note
Verify your settings:
Step 5
sensor(config-sig-app)# show settings
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
7-14
aic-web-ports—Variable for ports to look for AIC traffic.
The valid range is 0 to 65535. A comma-separated list of integer ranges a-b[,c-d] within
0-65535. The second number in the range must be greater than or equal to the first number.
The default is 80-80,3128-3128,8000-8000,8010-8010,8080-8080,8888-8888,24326-24326.
We recommend that you not configure AIC web ports, but rather use the default web
Note
ports.
http-enable [true | false]—Enables protection for web services. Set to true to require the sensor
to inspect HTTP traffic for compliance with the RFC.
The default is false.
max-outstanding-http-requests-per-connection—Maximum allowed HTTP requests per
connection.
The valid value is 1 to 16. The default is 10.
We recommend that you not configure AIC web ports, but rather use the default web ports.
application-policy
-----------------------------------------------
Chapter 7 Defining Signatures
78-16527-01