Cisco ASA 5555-X Configuration Guide

CHAPTER
13-1
Cisco ASA Series Firewall CLI Configuration Guide
13
Inspection of Basic Internet Protocols
The following topics explain application inspection for basic Internet protocols. For information on why
you need to use inspection for certain protocols, and the overall methods for applying inspection, see
Getting Started with Application Layer Protocol Inspection, page 12-1.
• DNS Inspection, page 13-1
• FTP Inspection, page 13-8
• HTTP Inspection, page 13-14
• ICMP Inspection, page 13-21
• ICMP Error Inspection, page 13-21
• Instant Messaging Inspection, page 13-21
• IP Options Inspection, page 13-26
• IPsec Pass Through Inspection, page 13-30
• IPv6 Inspection, page 13-33
• NetBIOS Inspection, page 13-37
• PPTP Inspection, page 13-39
• SMTP and Extended SMTP Inspection, page 13-39
• TFTP Inspection, page 13-45
DNS Inspection
The following sections describe DNS application inspection.
• DNS Inspection Actions, page 13-2
• Defaults for DNS Inspection, page 13-2
• Configure DNS Inspection, page 13-2
• Monitoring DNS Inspection, page 13-8

Cisco ASA 5555-X Specifications

General

Firewall Throughput	4 Gbps
Maximum Concurrent Sessions	1, 000, 000
Security Contexts	50
VPN Throughput	1.2 Gbps
RAM	8 GB
Storage	120 GB SSD
Power Supply	Dual, Hot-swappable
Form Factor	1RU
Interfaces	8 x 1 Gigabit Ethernet