Router (config-pmap)# class type inspect {class-map name} Router (config-pmap)# class type inspect CLASS-MAP 4c) Specfiy action of inspect for policy map. This is where we decide if traffic from our CLASS-MAP if will be inspected, passed or dropped. This action will be applied to our internal traffic or the ACL we created. The CLI should look ...
Inspection refers to the ASA's ability to look inside the configured protocols and perform certain actions based on the 'controlplane' traffic found in the traffic flow. The ASA has an understanding of the protocols it can inspect. Some protocols, such as FTP, can dynamically open additional ports for data transfer.
CBAC Definition ip inspect name FWOUT tcp ip inspect name FWOUT udp ip inspect name FWOUT icmp Seems pretty complete doesn’t it? With this simple configuration, most things will work. Earlier, I said that all TCP services would work. That is mostly true, but we’ll soon see an exception to this. If we look at the context sensitive help for ip inspect name FWOUT, we see several other ...
IP Inspects -- Why do we need them? - Cisco Learning Network
ip inspect name FWRULE ssh ip inspect name FWRULE pptp ip inspect name FWRULE ftp But i can not enter it on ISR4431/K9 . So i think the new router ISR4431/K9 doesn't have ip inspect function, isn't it? Below is the show version on the new router: bb_router#show version Cisco IOS XE Software, Version 03.16.04b.S - Extended Support Release
match default-inspection-traffic policy-map global_policy class inspection_default inspect dns preset_dns_map service-policy global_policy global Additional Information: Phase: 7
This relates to the policy map, all those inspect statements are the action take on the traffic identified/Matched by the class map.