Cisco 5510 - ASA SSL / IPsec VPN Edition Configuration Guide

37-17
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 37 Configuring Inspection of Basic Internet Protocols
FTP Inspection
Fields
• Match Type—Specifies whether the class map includes traffic that matches the criterion, or traffic
that does not match the criterion.
For example, if No Match is selected on the string “example.com,” then any traffic that contains
“example.com” is excluded from the class map.
• Criterion—Specifies which criterion of FTP traffic to match.
– Request-Command—Match an FTP request command.
– File Name—Match a filename for FTP transfer.
– File Type—Match a file type for FTP transfer.
– Server—Match an FTP server.
– User Name—Match an FTP user.
• Request-Command Criterion Values—Specifies the value details for the FTP request command
match.
– Request Command—Lets you select one or more request commands to match.
APPE—Append to a file.
CDUP—Change to the parent of the current directory.
DELE—Delete a file at the server site.
GET—FTP client command for the retr (retrieve a file) command.
HELP—Help information from the server.
MKD—Create a directory.
PUT—FTP client command for the stor (store a file) command.
RMD—Remove a directory.
RNFR—Rename from.
RNTO—Rename to.
SITE—Specify a server specific command.
STOU—Store a file with a unique name.
• File Name Criterion Values—Specifies to match on the FTP transfer filename.
– Regular Expression—Lists the defined regular expressions to match.
– Manage—Opens the Manage Regular Expressions dialog box, which lets you configure regular
expressions.
– Regular Expression Class—Lists the defined regular expression classes to match.
– Manage—Opens the Manage Regular Expression Class dialog box, which lets you configure
regular expression class maps.
• File Type Criterion Values—Specifies to match on the FTP transfer file type.
– Regular Expression—Lists the defined regular expressions to match.
– Manage—Opens the Manage Regular Expressions dialog box, which lets you configure regular
expressions.
– Regular Expression Class—Lists the defined regular expression classes to match.
– Manage—Opens the Manage Regular Expression Class dialog box, which lets you configure
regular expression class maps.

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General

Brand	Cisco
Model	5510 - ASA SSL / IPsec VPN Edition
Category	Firewall
Language	English