asked on IP Inspect Name
Does Cisco deny services or protocols if they are not on the IP Inspect Name list by default? I am not familiar with these commands and if I need them.
ip inspect name SDM_LOW cuseeme
ip inspect name SDM_LOW dns
ip inspect name SDM_LOW ftp
ip inspect name SDM_LOW h323
ip inspect name SDM_LOW https
ip inspect name SDM_LOW icmp
ip inspect name SDM_LOW netshow
ip inspect name SDM_LOW rcmd
ip inspect name SDM_LOW realaudio
ip inspect name SDM_LOW rtsp
ip inspect name SDM_LOW sqlnet
ip inspect name SDM_LOW streamworks
ip inspect name SDM_LOW tftp
ip inspect name SDM_LOW tcp
ip inspect name SDM_LOW udp
ip inspect name SDM_LOW vdolive
ip inspect name sdm_ins_in_100 cusee
ip inspect name sdm_ins_in_100 dns
ip inspect name sdm_ins_in_100 ftp
ip inspect name sdm_ins_in_100 h323
ip inspect name sdm_ins_in_100 https
ip inspect name sdm_ins_in_100 icmp
ip inspect name sdm_ins_in_100 netsh
ip inspect name sdm_ins_in_100 rcmd
ip inspect name sdm_ins_in_100 reala
ip inspect name sdm_ins_in_100 rtsp
ip inspect name sdm_ins_in_100 sqlne
ip inspect name sdm_ins_in_100 strea
ip inspect name sdm_ins_in_100 tftp
ip inspect name sdm_ins_in_100 tcp
ip inspect name sdm_ins_in_100 udp
ip inspect name sdm_ins_in_100 vdoli
ip inspect name sdm_ins_in_100 imap
ip inspect name sdm_ins_in_100 pop3
ip inspect name sdm_ins_in_100 ipsec
ip inspect name sdm_ins_in_100 gdoi
ip inspect name sdm_ins_in_100 isakm
ip inspect name sdm_ins_in_100 ssp
ip inspect name SDM_LOW cuseeme
ip inspect name SDM_LOW dns
ip inspect name SDM_LOW ftp
ip inspect name SDM_LOW h323
ip inspect name SDM_LOW https
ip inspect name SDM_LOW icmp
ip inspect name SDM_LOW netshow
ip inspect name SDM_LOW rcmd
ip inspect name SDM_LOW realaudio
ip inspect name SDM_LOW rtsp
ip inspect name SDM_LOW sqlnet
ip inspect name SDM_LOW streamworks
ip inspect name SDM_LOW tftp
ip inspect name SDM_LOW tcp
ip inspect name SDM_LOW udp
ip inspect name SDM_LOW vdolive
ip inspect name sdm_ins_in_100 cusee
ip inspect name sdm_ins_in_100 dns
ip inspect name sdm_ins_in_100 ftp
ip inspect name sdm_ins_in_100 h323
ip inspect name sdm_ins_in_100 https
ip inspect name sdm_ins_in_100 icmp
ip inspect name sdm_ins_in_100 netsh
ip inspect name sdm_ins_in_100 rcmd
ip inspect name sdm_ins_in_100 reala
ip inspect name sdm_ins_in_100 rtsp
ip inspect name sdm_ins_in_100 sqlne
ip inspect name sdm_ins_in_100 strea
ip inspect name sdm_ins_in_100 tftp
ip inspect name sdm_ins_in_100 tcp
ip inspect name sdm_ins_in_100 udp
ip inspect name sdm_ins_in_100 vdoli
ip inspect name sdm_ins_in_100 imap
ip inspect name sdm_ins_in_100 pop3
ip inspect name sdm_ins_in_100 ipsec
ip inspect name sdm_ins_in_100 gdoi
ip inspect name sdm_ins_in_100 isakm
ip inspect name sdm_ins_in_100 ssp
Cisco
Last Comment
katredrum
No, it does not deny ports or protocols if they're not in the inspect list. They are just there because those protocols have to be treated special. If you apply an ACL to an interface and you don't have everything in the ACL that you want to allow, then there is an implicit deny at the end that will deny services that are not in the ACL.
ASKER CERTIFIED SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.