Cisco 5510 - ASA SSL / IPsec VPN Edition Configuration Guide

40-9
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 40 Configuring Inspection for Management Application Protocols
GTP Inspection
Pdp-Context timeout: 00:30:00
Request timeout: 00:01:00
Signaling timeout: 00:30:00.
Tunnel timeout: 01:00:00.
T3-response timeout: 00:00:20.
Drop and log unknown message IDs.
– IMSI Prefix Filtering—Opens the IMSI Prefix Filtering dialog box to configure IMSI prefix
filters.
– Default Level—Sets the security level back to the default.
• Details—Shows the Parameters, IMSI Prefix Filtering, and Inspections tabs to configure additional
settings.
Modes
The following table shows the modes in which this feature is available:
Add/Edit GTP Policy Map (Details)
The Add/Edit GTP Policy Map pane lets you configure the security level and additional settings for GTP
application inspection maps.
Fields
• Name—When adding a GTP map, enter the name of the GTP map. When editing a GTP map, the
name of the previously configured GTP map is shown.
• Description—Enter the description of the GTP map, up to 200 characters in length.
• Security Level—Shows the security level and IMSI prefix filtering settings to configure.
• Permit Parameters—Tab that lets you configure the permit parameters for the GTP inspect map.
– Object Groups to Add
From object group—Specify an object group or use the browse button to open the Add Network
Object Group dialog box.
To object group—Specify an object group or use the browse button to open the Add Network
Object Group dialog box.
– Add—Add the specified country code and network code to the IMSI Prefix table.
– Delete—Deletes the specified country code and network code from the IMSI Prefix table.
– Permit Errors—Lets any packets that are invalid or that encountered an error during inspection
to be sent through the adaptive security appliance instead of being dropped. By default, all
invalid packets or packets that failed during parsing are dropped.
• General Parameters—Tab that lets you configure the general parameters for the GTP inspect map.
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
••••—

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General

Brand	Cisco
Model	5510 - ASA SSL / IPsec VPN Edition
Category	Firewall
Language	English