Cisco 7604 Configuration Guide - Page 513

Chapter 22 Applying Application Layer Protocol Inspection SNMP Inspection Note For information about the differences between the inspect smtp and inspect esmtp commands, see the "SMTP and Extended SMTP Inspection Overview" section on page 22-94. Step 7 Use the service-policy command to apply the policy map globally or to a specific interface, as follows: hostname(config-pmap-c)# service-policy policy_map_name [global | interface interface_ID] hostname(config)# where policy_map_name is the policy map you configured in Step 4. If you want to apply the policy map to traffic on all the interfaces, use the global option. If you want to apply the policy map to traffic on a specific interface, use the interface interface_ID option, where interface_ID is the name assigned to the interface with the nameif command. The FWSM begins inspecting SMTP traffic, as specified. Example 22-13 Configuring and Enabling ESMTP Inspection hostname(config)# class-map smtp_port hostname(config-cmap)# match port tcp eq 25 hostname(config-cmap)# policy-map sample_policy hostname(config-pmap)# class smtp_port hostname(config-pmap-c)# inspect esmtp hostname(config-pmap-c)# service-policy sample_policy interface outside hostname(config)# SNMP Inspection This section describes how to enable SNMP application inspection and change the default port configuration. This section includes the following topics: • SNMP Inspection Overview, page 22-97 • Enabling and Configuring SNMP Application Inspection, page 22-98 SNMP Inspection Overview SNMP application inspection lets you restrict SNMP traffic to a specific version of SNMP. Earlier versions of SNMP are less secure; therefore, denying certain SNMP versions may be required by your security policy. The FWSM can deny SNMP versions 1, 2, 2c, or 3. You control the versions permitted by using the deny version command in SNMP map configuration mode. OL-20748-01 Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM 22-97