Cisco Cisco Firepower Management Center 2000

A message at the bottom of the page identifies the intrusion policy layer that contains the configuration. 
See 

 for more information.

For more information on configuring the other options on this page, see 

Optionally, you can modify any of the following under 

:

Specify the port or ports where telnet traffic should be decoded in the 

 field. Telnet typically 

connects to TCP port 23. Separate multiple ports with commas.

Add the same list of ports indicated here to the TCP client reassembly port list. For more information 
on configuring TCP reassembly ports, see 

Because encrypted traffic (SSL) cannot be decoded, adding port 22 (SSH) could yield unexpected 
results.

Select or clear the 

 Telnet Protocol Options check box to enable or disable telnet 

normalization.

Select or clear the 

 Telnet Protocol Options check box to enable or disable anomaly 

detection.

Specify an 

of consecutive AYT commands to permit.

Cisco recommends that you set the AYT threshold to a value no higher than the default value.

Optionally, click 

 at the top of the page to display rules 

associated with individual options.

Click 

 to return to the FTP and Telnet Configuration page.

Save your policy, continue editing, discard your changes, revert to the default configuration settings in 
the base policy, or exit while leaving your changes in the system cache. See the 

 table for more information.

Protection

You can set options for decoding on multiple FTP servers. Each server profile you create contains the 
server IP address and the ports on the server where traffic should be monitored. You can specify which 
FTP commands to validate and which to ignore for a particular server, and set maximum parameter 
lengths for commands. You can also set the specific command syntax the decoder should validate against 
for particular commands and set alternate maximum command parameter lengths.

If no preprocessor rule is mentioned, the option is not associated with a preprocessor rule.

Use this option to specify one or more IP addresses of FTP servers.