B-45
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
Appendix B Signature Engines
Service Engines
Table B-21 lists parameters specific to the Service H225 engine.
Table B-21 Service H.225 Engine Parameters
Parameter Description Value
message-type Specifies the type of H225 message to which the
signature applies:
•
SETUP
•
ASN.1-PER
•
Q.931
•
TPKT
asn.1-per
q.931
setup
tpkt
policy-type Specifies the type of H225 policy to which the
signature applies:
•
Inspects field length.
•
Inspects presence.
If certain fields are present in the message, an
alert is sent.
•
Inspects regular expressions.
•
Inspects field validations.
•
Inspects values.
Note
Regex and presence are not valid for
TPKT signatures.
length
presence
regex
validate
value
specify-field-name {yes |
no}
(Optional) Enables field name for use. Gives a
dotted representation of the field name to which
this signature applies.
•
field-name—Specifies the field name to
inspect.
Note
Only valid for SETUP and Q.931 message
types.
1 to 512
specify-invalid-packet-index
{yes | no}
(Optional) Enables invalid packet index for use
for specific errors in ASN, TPKT, and other errors
that have fixed mapping.
•
invalid-packet-index—Specifies the
inspection for invalid packet index.
0 to 255