a question about application inspection configuration?

hanyawad · ‎05-12-2010

dear experts, hello

when i configure an application inspection for some protocols or applications i may use its class map like ( ftp-map MY-FTP-CLASS) then define

some parameters in its prompts...

another way i may say ( policy-map type inspect ftp MY-FTP-CLASS)

so what is the difference between them, thanks alot for your help

labib

Jennifer Halim · ‎05-13-2010

If you uses ftp-map, then the inspection is specific to just the ftp protocol. Same goes for http, where it is matching on http application specific, as different application has different application format, ie: ftp and http are 2 different protocols that have specific application feature.

With the normal class-map, it is normally just matching on source/destination ip address and/or protocol and port number.

Hope that helps.