Cisco Cisco Firepower Management Center 4000

You can combine the syntax in the table above as needed to create parameter validation statements that 
correctly validate each FTP command where you need to validate traffic. 

When you include a complex expression in a TYPE command, surround it by spaces. Also, surround 
each operand within the expression by spaces. For example, type 

char A | B 

, not 

char A|B

.

Protection

You can configure several options at the server level. For each FTP server you add, you can specify the 
ports to be monitored, the commands to validate, the default maximum parameter length for commands, 
alternate parameter lengths for specific commands, and validation syntax for particular commands. You 
can also choose whether to check for string format attacks and telnet commands on the FTP channel and 
whether to print configuration information with each command. For additional information on 
server-level FTP options, see 

.

Admin/Intrusion Admin

Select 

.

The Intrusion Policy page appears.

Click the edit icon (

) next to the policy you want to edit.

If you have unsaved changes in another policy, click 

 to discard those changes and continue. See 

 for information on saving unsaved changes in another 

policy.

The Policy Information page appears.

Click 

 in the navigation panel on the left.

The Advanced Settings page appears.

You have two choices, depending on whether 

 under Application Layer 

Preprocessors is enabled:

If the configuration is enabled, click 

.

If the configuration is disabled, click 

, then click 

.

date _datefmt

 

If 

contains 

#

, the represented parameter must be a number.

If 

contains 

C

, the represented parameter must be a character.

If 

contains literal strings, the represented parameter must match the 

literal string.

string

The represented parameter must be a string.

host_port

The represented parameter must be a valid host port specifier as defined by RFC 
959, the File Transfer Protocol specification by the Network Working Group.