It's not match all
You can confirm it using the following command. I have a L7 policy map for
http with two criterias and you can see them shown separately:
asa1#sh service-policy global inspect http
Global policy:
Service-policy: global_policy
Class-map: inspection_default
Inspect: http httpl7, packet 198, drop 3, reset-drop 1
protocol violations
packet 0
match request uri regex http
drop-connection, packet 2
match request header host regex host
reset, packet 1
With regards
Kings
On Wed, Aug 31, 2011 at 10:39 PM, Mark Senteza <[email protected]>wrote:
> Hi all,
>
> When I configure a class-map type inspect im, I have the option to
> "match-all" and so I can specify all the variables I want matched in my
> class-map.
>
> The "policy-map type inspect im" gives me the same match options that are
> found under the class-map type inspect, but I cant specify to match on all
> of them. That being the case, my question is, if I choose to configure my
> match options under the policy-map type inspect im, would I automatically be
> matching on any one of the options that the traffic matches or all of them?
>
> Mark
>
> _______________________________________________
> For more information regarding industry leading CCIE Lab training, please
> visit www.ipexpert.com
>
> Are you a CCNP or CCIE and looking for a job? Check out
> www.PlatinumPlacement.com
>
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit
www.ipexpert.com
Are you a CCNP or CCIE and looking for a job? Check out
www.PlatinumPlacement.com
