Cisco ASA 5512-X Configuration Guide

CHAPTER
13-1
Cisco ASA Series Firewall CLI Configuration Guide
13
Inspection of Basic Internet Protocols
The following topics explain application inspection for basic Internet protocols. For information on why
you need to use inspection for certain protocols, and the overall methods for applying inspection, see
Getting Started with Application Layer Protocol Inspection, page 12-1.
• DNS Inspection, page 13-1
• FTP Inspection, page 13-8
• HTTP Inspection, page 13-14
• ICMP Inspection, page 13-21
• ICMP Error Inspection, page 13-21
• Instant Messaging Inspection, page 13-21
• IP Options Inspection, page 13-26
• IPsec Pass Through Inspection, page 13-30
• IPv6 Inspection, page 13-33
• NetBIOS Inspection, page 13-37
• PPTP Inspection, page 13-39
• SMTP and Extended SMTP Inspection, page 13-39
• TFTP Inspection, page 13-45
DNS Inspection
The following sections describe DNS application inspection.
• DNS Inspection Actions, page 13-2
• Defaults for DNS Inspection, page 13-2
• Configure DNS Inspection, page 13-2
• Monitoring DNS Inspection, page 13-8

Cisco ASA 5512-X Specifications

General

Firewall Throughput	1.2 Gbps
VPN Throughput	200 Mbps
Maximum VPN Peers	250
Integrated IPS	Yes
IPS Throughput	250 Mbps
RAM	4 GB
Power Supply	AC, 100-240V
Security Contexts	2 (Standard), 50 (with Security Contexts license)
Interfaces	6 x Gigabit Ethernet
Dimensions (H x W x D)	1.75 x 17.5 x 14.5 inches
Weight	16 lbs