Cisco 500 Series, Configuration Manual

Page: 532 / 1140

25-68
Cisco Security Appliance Command Line Configuration Guide
OL-12172-03
Chapter 25 Configuring Application Layer Protocol Inspection
SIP Inspection
Where string is the description of the class map (up to 200 characters).
c. (Optional) To match a called party, as specified in the To header, enter the following command:
hostname(config-cmap)# match [ not ] called-party regex { class class_name | regex_name }
Where the regex regex_name argument is the regular expression you created in Step 1 . The class
regex_class_name is the regular expression class map you created in Step 2 .
d. (Optional) To match a calling party, as specified in the From header, enter the following command:
hostname(config-cmap)# match [ not ] calling-party regex { class class_name | regex_name }
Where the regex regex_name argument is the regular expression you created in Step 1 . The class
regex_class_name is the regular expression class map you created in Step 2 .
e. (Optional) To match a content length in the SIP header, enter the following command:
hostname(config-cmap)# match [ not ] content length gt length
Where length is the number of bytes the content length is greater than. 0 to 65536.
f. (Optional) To match an SDP content type or regular expression, enter the following command:
hostname(config-cmap)# match [ not ] content type { sdp | regex { class class_name |
regex_name }}
Where the regex regex_name argument is the regular expression you created in Step 1 . The class
regex_class_name is the regular expression class map you created in Step 2 .
g. (Optional) To match a SIP IM subscriber, enter the following command:
hostname(config-cmap)# match [ not ] im-subscriber regex { class class_name | regex_name }
Where the regex regex_name argument is the regular expression you created in Step 1 . The class
regex_class_name is the regular expression class map you created in Step 2 .
h. (Optional) To match a SIP via header, enter the following command:
hostname(config-cmap)# match [ not ] message-path regex { class class_name | regex_name }
Where the regex regex_name argument is the regular expression you created in Step 1 . The class
regex_class_name is the regular expression class map you created in Step 2 .
i. (Optional) To match a SIP request method, enter the following command:
hostname(config-cmap)# match [ not ] request-method method
Where method is the type of method to match (ack, bye, cancel, info, invite, message, notify,
options, prack, refer, register, subscribe, unknown, update).
j. (Optional) To match the requester of a third-party registration, enter the following command:
hostname(config-cmap)# match [ not ] third-party-registration regex { class class_name |
regex_name }
Where the regex regex_name argument is the regular expression you created in Step 1 . The class
regex_class_name is the regular expression class map you created in Step 2 .
k. (Optional) To match an URI in the SIP headers, enter the following command:
hostname(config-cmap)# match [ not ] uri { sip | tel } length gt length
Where length is the number of bytes the URI is greater than. 0 to 65536.
Step 4
Create a SIP inspection policy map, enter the following command:
hostname(config)# policy-map type inspect sip policy_map_name
hostname(config-pmap)#