Cisco Cisco Firepower Management Center 4000

Additional commands you may want to add include 

XPWD

, 

XCWD

, 

XCUP

, 

XMKD

, and 

XRMD

. For more 

information on these commands, see RFC 775, the Directory oriented FTP commands 
specification by the Network Working Group.

Specify the default maximum number of bytes for a command parameter in the 

 field. 

To detect a different maximum parameter length for particular commands, click 

 next to 

. In the first text box of the row that appears, specify the maximum parameter 

length. In the second text box, specify the commands, separated by spaces, where this alternate 
maximum parameter length should apply.

You can add as many alternative maximum parameter lengths as needed.

To check for string format attacks on particular commands, specify the commands, separated by 
spaces, in the 

 text box.

To specify the valid format for a command, click 

 next to 

. Specify the command 

you want to validate, then type a validation statement for the command parameter. For more 
information on the validation statement syntax, see 

To improve performance on FTP data transfers by disabling all inspection other than state inspection 
on the data transfer channel, enable 

.

To inspect data transfers, the global FTP/Telnet 

option must be selected. For 

more information on setting global options, see 

To detect when telnet commands are used over the FTP command channel, select 

.

To ignore telnet character and line erase commands when normalizing FTP traffic, enable 

.

Optionally, click 

 at the top of the page to display rules 

associated with individual options.

Click 

 to return to the FTP and Telnet Configuration page.

Optionally, modify the related troubleshooting option only if asked to do so by Support; click the 

 sign 

next to 

 to expand the troubleshooting options section. See 

 for more information. 

Save your policy, continue editing, discard your changes, revert to the default configuration settings in 
the base policy, or exit while leaving your changes in the system cache. See the 

 table for more information.

Protection