Cisco Cisco Packet Data Gateway (PDG) Prospecto
ACS Configuration Mode Commands
p2p-detection behavioral ▀
Cisco ASR 5x00 Command Line Interface Reference ▄
497
p2p-detection behavioral
This command enables or disables behavioral detection for unidentified traffic.
Product
ADC
Privilege
Security Administrator, Administrator
Mode
Exec > ACS Configuration
active-charging service service_name
Entering the above command sequence results in the following prompt:
[local]host_name(config-acs)#
Syntax
[ no ] p2p-detection behavioral { behavioral_list | all }
no
If previously configured, disables the behavioral configuration.
behavioral_list
Specifies the behavior to match. The behavioral list is the list of supported behavioral detection logic
populated from the currently loaded ADC plugin.
populated from the currently loaded ADC plugin.
behavioral_list
must be one of the following:
all: Enables all behavioral detection types supported by the ADC plugin
download: Detects unknown flows which are data download using behavioral analysis
p2p: Detects P2P and file sharing protocols using behavioral analysis
upload: Detects unknown flows which are data upload using behavioral analysis
voip: Detects VoIP (voice and video) protocols using behavioral analysis
Usage
Use this command to enable or disable behavioral detection for unidentified traffic. Behavioral VoIP is meant
for zero day detection of VoIP traffic. Behavioral upload/download is similar to client-server
upload/download using HTTP, FTP, SFTP, etc. It must also detect flows of non-standard ports which ECS
cannot detect and falls under the client-server model. The behavioral feature is disabled by default.
for zero day detection of VoIP traffic. Behavioral upload/download is similar to client-server
upload/download using HTTP, FTP, SFTP, etc. It must also detect flows of non-standard ports which ECS
cannot detect and falls under the client-server model. The behavioral feature is disabled by default.
Example
The following command specifies to configure behavioral VoIP:
p2p-detection behavioral voip