3com 3031 Instruccion De Instalación

C

HAPTER

 59: F

IREWALL

 C

ONFIGURATION

This task is used to configure waiting timeout value in SYN state and FIN state of 
TCP, free timeout value of TCP and UDP session entries. The default timeout time 
of syn, fin, tcp and udp are 30s, 5s, 3600s and 30s respectively.

Perform the following configuration in ASPF policy view.

The value of application protocol can be ftp, h323, smtp, rtsp, tcp, udp and http.

When the protocol is http, Java blocking can be configured.

Perform the following configuration in ASPF policy view.

The interface stream detection will take effect only after applying the pre-defined 
ASPF policy on the interface.

Table 895   Configuring application layer protocol detection

Configure ASPF detection for 
application layer protocol

detect protocol [ aging-time seconds ]

Delete the configured application 
protocol detection

Table 896   Configuring Java blocking detection

Configure Java blocking detection

detect http [ java-list acl-number ] 

[ aging-time seconds ]

Delete the configured ASPF detection 
rule

Table 897   Configuring general TCP and UDP protocol detection

Configure general TCP detection

detect tcp [ aging-time seconds ]

Configure general UDP detection

detect udp [ aging-time seconds ]

Delete general TCP detection

Delete general UDP detection