User manual

B-13
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Appendix B Signature Engines
AIC Engine
Table B-6 lists the parameters that are specific to the AIC FTP engine.
request-methods Specifies an AIC signature that allows
actions to be associated with HTTP request
methods:
• define-request-method—Specifies
get, put, and so forth.
• recognized-request-methods—Lists
methods recognized by the sensor.
—
transfer-encodings Specifies an AIC signature that deals with
transfer encodings:
• define-transfer-encoding—Associates
an action with each method, such as
compress, chunked, and so forth.
• recognized-transfer-encodings—Lists
methods recognized by the sensor.
• chunked-transfer-encoding—Error
specifies actions to be taken when a
chunked encoding error is seen.
—
Table B-5 AIC HTTP Engine Parameters (continued)
Parameter Description
Table B-6 AIC FTP Engine Parameters
Parameter Description Value
signature-type Specifies the type of
AIC signature.
• ftp-commands
• unrecognized-ftp-co
mmand
•
ftp-commands Associates an action
with an FTP command:
• ftp-command—Lets
you choose the FTP
command you want
to inspect.
• help, noop, stat,
syst, user, abort,
acct, allo, appe,
cdup, cwd, dele,
list, mkd, mode,
nlst, pass, pasv,
port, pass, quit,
rein, rest, retr, rmd,
rnfr, rnto, site,
smnt, stor, stou,
stru, type
unrecognized-ftp-command Inspects unrecognized
FTP commands.