User manual

B-46
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Appendix B Signature Engines
Service Engines
Table B-21 lists parameters specific to the Service H225 engine.
Table B-21 Service H.225 Engine Parameters
Parameter Description Value
message-type Specifies the type of H225 message to
which the signature applies:
• SETUP
• ASN.1-PER
• Q.931
• TPKT
asn.1-per
q.931
setup
tpkt
policy-type Specifies the type of H225 policy to which
the signature applies:
• Inspects field length.
• Inspects presence.
If certain fields are present in the
message, an alert is sent.
• Inspects regular expressions.
• Inspects field validations.
• Inspects values.
Note Regex and presence are not valid
for TPKT signatures.
length
presence
regex
validate
value
specify-field-name {yes |
no}
(Optional) Enables field name for use.
Gives a dotted representation of the field
name to which this signature applies.
• field-name—Specifies the field name
to inspect.
Note Only valid for SETUP and Q.931
message types.
1 to 512
specify-invalid-packet-index
{yes | no}
(Optional) Enables invalid packet index for
use for specific errors in ASN, TPKT, and
other errors that have fixed mapping.
• invalid-packet-index—Specifies the
inspection for invalid packet index.
0 to 255