User manual

B-45
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
Appendix B Signature Engines
Service Engines
Table B-21 lists parameters specific to the Service H225 engine.
Table B-21 Service H.225 Engine Parameters
Parameter Description Value
message-type Specifies the type of H225 message to which the
signature applies:
• SETUP
• ASN.1-PER
• Q.931
• TPKT
asn.1-per
q.931
setup
tpkt
policy-type Specifies the type of H225 policy to which the
signature applies:
• Inspects field length.
• Inspects presence.
If certain fields are present in the message, an
alert is sent.
• Inspects regular expressions.
• Inspects field validations.
• Inspects values.
Note Regex and presence are not valid for
TPKT signatures.
length
presence
regex
validate
value
specify-field-name {yes |
no}
(Optional) Enables field name for use. Gives a
dotted representation of the field name to which
this signature applies.
• field-name—Specifies the field name to
inspect.
Note Only valid for SETUP and Q.931 message
types.
1 to 512
specify-invalid-packet-index
{yes | no}
(Optional) Enables invalid packet index for use
for specific errors in ASN, TPKT, and other errors
that have fixed mapping.
• invalid-packet-index—Specifies the
inspection for invalid packet index.
0 to 255