Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

IP INSPEC SQLNET

Hello everyone

sqlnet inspection is causing me some problems how can i modify this inspection rule is it possible or i should just disable it, for ftp inspection there is the possibility as far i have seen with ftp-map feature and strict option on the class map

Best regards

Burim

1 REPLY
Cisco Employee

Re: IP INSPEC SQLNET

You can't modify the actions this inspection takes on SQL packets like you can with an ftp-map for FTP inspection.

All you can do is turn it on or off, but using the standard class-map/policy-map config you can turn it off just for one server or one client if that's all that's giving you trouble. Just define an access-list for the matching traffic, then remove the inspection out of the global service-policy and apply it with a class-map/policy-map pointing to that access-list.

202
Views
0
Helpful
1
Replies
CreatePlease to create content