Cisco ASA 5506-X Configuration Guide

CHAPTER
13-1
Cisco ASA Series Firewall CLI Configuration Guide
13
Inspection of Basic Internet Protocols
The following topics explain application inspection for basic Internet protocols. For information on why
you need to use inspection for certain protocols, and the overall methods for applying inspection, see
Getting Started with Application Layer Protocol Inspection, page 12-1.
• DNS Inspection, page 13-1
• FTP Inspection, page 13-8
• HTTP Inspection, page 13-14
• ICMP Inspection, page 13-21
• ICMP Error Inspection, page 13-21
• Instant Messaging Inspection, page 13-21
• IP Options Inspection, page 13-26
• IPsec Pass Through Inspection, page 13-30
• IPv6 Inspection, page 13-33
• NetBIOS Inspection, page 13-37
• PPTP Inspection, page 13-39
• SMTP and Extended SMTP Inspection, page 13-39
• TFTP Inspection, page 13-45
DNS Inspection
The following sections describe DNS application inspection.
• DNS Inspection Actions, page 13-2
• Defaults for DNS Inspection, page 13-2
• Configure DNS Inspection, page 13-2
• Monitoring DNS Inspection, page 13-8

Cisco ASA 5506-X Specifications

General

Model	ASA 5506-X
Firewall Throughput	750 Mbps
Maximum Firewall Connections	50, 000
Maximum VPN Peers	50
Integrated Ports	8 x 1 GE
Stateful Inspection Throughput	750 Mbps
Weight	4.4 lb (2 kg)
Firewall Throughput (Multiprotocol)	750 Mbps
Firewall Throughput (Application Visibility and Control AVC)	250 Mbps
Concurrent Sessions	50, 000
New Connections per Second	10, 000
IPsec VPN Throughput	100 Mbps
Interfaces	8 x 1 GE
Memory	4 GB
Flash Memory	8 GB
Form Factor	Desktop
VPN Throughput	100 Mbps
Maximum Concurrent Sessions	50, 000
New Sessions per Second	10, 000
Operating Temperature	32 to 104°F (0 to 40°C)
Storage Temperature	-13 to 158°F (-25 to 70°C)
Power Supply	External
Humidity	10% to 90% non-condensing