Cisco Cisco Firepower Management Center 4000

Specifies the maximum number of bytes to allow in the request or response Contact header field. A 
longer Contact triggers an event when rule 140:15 is enabled. The Contact field provides a URI that 
specifies the location to contact with subsequent messages.

Specifies the maximum number of bytes to allow in the content of the request or response message 
body. Longer content triggers an event when rule 140:16 is enabled.

Enables and disables inspection of data channel traffic. Note that the preprocessor continues 
inspection of other non-data-channel SIP traffic when you enable this option.

Protection

Use the following procedure to configure the SIP preprocessor.

Admin/Intrusion Admin

Select 

.

The Intrusion Policy page appears.

Click the edit icon (

) next to the policy you want to edit.

If you have unsaved changes in another policy, click 

 to discard those changes and continue. See 

 for information on saving unsaved changes in another 

policy.

The Policy Information page appears.

Click 

 in the navigation panel on the left.

The Advanced Settings page appears.

You have two choices, depending on whether 

 under Application Layer Preprocessors is 

enabled:

If the configuration is enabled, click 

.

If the configuration is disabled, click 

, then click 

.

The SIP Configuration page appears. A message at the bottom of the page identifies the intrusion policy 
layer that contains the configuration. See 

 for more 

information.

You can modify any of the options described in 

.

Optionally, click 

 at the top of the page to display rules associated with 

individual options.

Click 

 to return to the SIP Configuration page.