a question about application inspection configuration?

Unanswered Question
May 12th, 2010

dear experts, hello

when i configure an application inspection for some protocols or applications i may use its class map  like ( ftp-map MY-FTP-CLASS) then define

some parameters in its prompts...

another way i may say ( policy-map type inspect ftp MY-FTP-CLASS)

so what is the difference between them, thanks alot for your help

labib

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Jennifer Halim Thu, 05/13/2010 - 03:24

If you uses ftp-map, then the inspection is specific to just the ftp protocol. Same goes for http, where it is matching on http application specific, as different application has different application format, ie: ftp and http are 2 different protocols that have specific application feature.

With the normal class-map, it is normally just matching on source/destination ip address and/or protocol and port number.

Hope that helps.

Actions

This Discussion