Cisco ASA 5540

40-7
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 40 Configuring Inspection for Management Application Protocols
GTP Inspection
Fields
• Use the default GTP inspection map—Specifies to use the default GTP map.
• Select an GTP map for fine control over inspection—Lets you select a defined application inspection
map or add a new one.
• Add—Opens the Add Policy Map dialog box for the inspection.
Modes
The following table shows the modes in which this feature is available:
GTP Inspect Map
The GTP pane lets you view previously configured GTP application inspection maps. A GTP map lets
you change the default configuration values used for GTP application inspection.
GTP is a relatively new protocol designed to provide security for wireless connections to TCP/IP
networks, such as the Internet. You can use a GTP map to control timeout values, message sizes, tunnel
counts, and GTP versions traversing the security appliance.
Note GTP inspection is not available without a special license.
Fields
• GTP Inspect Maps—Table that lists the defined GTP inspect maps.
• Add—Configures a new GTP inspect map. To edit a GTP inspect map, choose the GTP entry in the
GTP Inspect Maps table and click Customize.
• Delete—Deletes the inspect map selected in the GTP Inspect Maps table.
• Security Level—Security level low only.
– Do not Permit Errors
– Maximum Number of Tunnels: 500
– GSN timeout: 00:30:00
– Pdp-Context timeout: 00:30:00
– Request timeout: 00:01:00
– Signaling timeout: 00:30:00.
– Tunnel timeout: 01:00:00.
– T3-response timeout: 00:00:20.
– Drop and log unknown message IDs.
• IMSI Prefix Filtering—Opens the IMSI Prefix Filtering dialog box to configure IMSI prefix filters.
• Customize—Opens the Add/Edit GTP Policy Map dialog box for additional settings.
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
••••—