Cisco Cisco ASA 5540 Adaptive Security Appliance 技術マニュアル

Cisco

13

XML Examples for the Cisco Application Centric Infrastructure Security Device Package

Protocol Timeouts

XML Example (Advanced Threat Detection)

This XML example sets up advanced threat detection statistics.

ASA Configuration

threat-detection statistics protocol number-of-rate 3

threat-detection statistics access-list

threat-detection statistics tcp-intercept rate-interval 50 burst-rate 200 average-rate 100

<polUni>

<fvTenant name="tenant1">

<vnsLDevVip name="Firewall">

<vnsDevFolder key="AdvancedThreatDetection" name="AdvScan" >

<vnsDevParam key="statistics" name="statistics" value="enable"/>

<vnsDevParam key="access_list" name="status5" value="enable"/>

<vnsDevFolder key="AdvancedThreatDetectionTcpIntercept" name="AdvScanTCPInt" >

<vnsDevParam key="status" name="AdvRateStatus" value="enable"/>

<vnsDevParam key="average_rate" name="AdvRate" value="100"/>

<vnsDevParam key="rate_interval" name="AdvRI" value="50"/>

<vnsDevParam key="burst_rate" name="AdvBR" value="200"/>

</vnsDevFolder>

<vnsDevFolder key="AdvancedThreatDetectionProtocol" name="AdvScanProtocol" >

<vnsDevParam key="status" name="ProtocolStatus" value="enable"/>

<vnsDevParam key="number_of_rate" name="ProtocolRate" value="3"/>

</vnsDevFolder>

</vnsDevFolder>

</vnsLDevVip>

</fvTenant>

</polUni>

Protocol Timeouts

This XML example sets up the protocol timeout value for the connection timer.

ASA Configuration

timeout conn 2:00:59

XML Example

<polUni>

<fvTenant name="tenant1">

<vnsLDevVip name="Firewall">

<vnsDevFolder key="Timeouts" name="TO">

<vnsDevParam key="Connection" name="conn1" value="2:0:59"/>

</vnsDevFolder>

</vnsLDevVip>

</fvTenant>

</polUni>