In the CLI
The example below shows how to configure ACLs to identify and monitor Apple FaceTime traffic.
(host) (config) #ip access-list session facetime-acl
(host) (config-sess-facetime-acl) #any any svc-http permit position 1 queue low
(host) (config-sess-facetime-acl) #any any svc-https permit position 2 queue low
(host) (config-sess-facetime-acl) #any network 17.0.0.0 255.0.0.0 tcp 5223 permit classify-
media position 3 queue low
(host) (config-sess-facetime-acl) #any any udp 3478 3498 permit position 4 queue low
(host) (config-sess-facetime-acl) #any any udp 16384 16387 permit position 5 queue low
(host) (config-sess-facetime-acl) #any any udp 16393 16402 permit position 6 queue low
You can use the WebUI or CLI to enable the classify-media option for the Apple Push Notification service over
TCP 5223.
In the WebUI
The example below shows how to configure ACLs to identify and monitor Apple FaceTime traffic.
1. Navigate to the Configuration > Security > Access Control page.
2. Click the Policies tab.
3. Click Add to create a new policy.
4. Enter a name for the policy in the Policy Name field and choose Session in the Policy Type drop down
menu.
5. Under Rules, click Add. Configure the settings described in Table 236.
Parameter Description
IP Version IP version of the rule. The version can be IPv4 or IPv6.
Source Match any IPv4 or IPv6 source traffic. The values can be:
n alias
n any
n host
n localip
n network
n user
Destination Match any IPv4 or IPv6 destination traffic. The values can be:
n alias
n any
n host
n localip
n network
n user
Service/Application Match any service or application. The values can be:
n any
n Application
n Application category
n protocol
n service
n tcp
n udp
n Web category/Reputation
Table 236: Session Rule Parameters
AOS-W 6.5.3.x | User Guide Voice and Video | 967
To Next Page
Loading...