Solved: NBAR and match protocol

shibindong · ‎05-10-2009

is it necessary to turn on NBAR for command "match protocol" even the protocol is very command protocol "smtp", "DNS", etc?

if no, when shall we turn on NBAR?

mahmoodmkl · ‎05-10-2009

Hi

as soon as u enter the config in the MQC and if u want to use the above statement NBAR is automatically turned on.

If u dnot want to use NBAR then u can use access-lists.

Thanks

Mahmood

mahmoodmkl · ‎05-10-2009

Hi

as soon as u enter the config in the MQC and if u want to use the above statement NBAR is automatically turned on.

If u dnot want to use NBAR then u can use access-lists.

Thanks

Mahmood

Joseph W. Doherty · ‎05-10-2009

"is it necessary to turn on NBAR for command "match protocol" even the protocol is very command protocol "smtp", "DNS", etc? "

No, as Mahmood also notes.

"if no, when shall we turn on NBAR?"

If you need to do NBAR protocol discovery.